Add integrity check of GateManager firmware

Vulnerability

The vulnerability is an upload of code without integrity check in the firmware archive functionality of Secomea GateManager. An authenticated attacker with service operator level permissions can upload a malicious firmware archive because the device does not verify the integrity or authenticity of the uploaded file. This affects all versions of GateManager prior to 9.4.621054022 [1]. The code path is reachable when a user with sufficient privileges performs a firmware update via the web interface.

Exploitation

Exploitation requires network access and user interaction. An attacker must craft a malicious firmware archive and trick a victim who has service operator level permissions into uploading it through the GateManager interface [1]. The attack complexity is high (AC:H) because the attacker must convince a privileged user to perform the upload, typically via social engineering or phishing. No additional authentication is needed beyond the victim's existing session.

Impact

Successful exploitation allows the attacker to execute arbitrary code on the GateManager server, effectively backdooring the device. The CVSSv3 score of 8.3 indicates high impact on confidentiality, integrity, and availability, with a scope change (S:C) meaning the compromised component can affect resources beyond its original security boundary [1]. The attacker gains full control over the device.

Mitigation

Secomea released a fix in version 9.4.621054022 [1]. All users should upgrade to this version or later. No workarounds are documented. The vendor's cybersecurity advisory page [2] outlines their general vulnerability handling process but does not provide additional mitigation steps for this specific CVE. The vulnerability is not listed on the CISA Known Exploited Vulnerabilities (KEV) catalog as of the publication date.