Unified Threat Management vulnerabilities

2 known vulnerabilities in Unified Threat Management from Securepoint. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  unified_threat_management: Improper Authentication

  CVE-2024-39340Jul 12, 2024Securepoint

  The authentication system of Securepoint UTM mishandles OTP keys. This allows the bypassing of second-factor verification (when OTP is enabled) in both the administration web interface and the user portal. Affected versions include UTM 11.5 through 12.6.4 and

• 7.5 High severity

  Unified Threat Management: Incorrect Authorization

  CVE-2023-22620Apr 12, 2023SecurepointEPSS 3.89%

  An issue was discovered in SecurePoint UTM before 12.2.5.1. The firewall's endpoint at /spcgi.cgi allows sessionid information disclosure via an invalid authentication attempt. This can afterwards be used to bypass the device's authentication and get access to