An improper authentication flaw in the Secomea GateManager webserver modules allows an attacker to bypass credential checks, granting unauthorized access to the management interface and any resources managed by the system. The vulnerability is classified as CWE-287, identifying it as an authentication bypass weakness. If exploited, an attacker could compromise the confidentiality and integrity of configuration data and potentially perform further actions within the managed environment.

The flaw affects Secomea GateManager version 11.4.0, as specified by the CNA’s affected product list. No other product or version information is provided in the CVE data.

The CVSS score of 6.5 places the vulnerability in the moderate severity range. EPSS data is unavailable and the issue is not listed in the CISA KEV catalog, indicating no known exploitation activity currently. Based on the description, the likely attack vector is through the publicly accessible web interface where authentication is enforced but can be bypassed; however, the exact conditions and prerequisites for exploitation are not detailed in the supplied information.