Is CVE-2021-32010 actively exploited?

No active exploitation of CVE-2021-32010 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2021-32010 be exploited remotely?

Yes. CVE-2021-32010 is exploitable remotely over the network (CVSS attack vector: Network).

What is the CVSS score of CVE-2021-32010?

CVE-2021-32010 has a CVSS score of 8.1 (HIGH).

HOME VULNERABILITIESCVE-2021-32010

HIGH

CVE-2021-32010

CWE-326Published: May 4, 2022· Updated: Jun 17, 2026

8.1

CVSS v3.1

Official Description

Inadequate Encryption Strength vulnerability in TLS stack of Secomea SiteManager, LinkManager, GateManager may facilitate man in the middle attacks. This issue affects: Secomea SiteManager All versions prior to 9.7. Secomea LinkManager versions prior to 9.7. Secomea GateManager versions prior to 9.7.

NVD Source

Technical Analysis

CVE-2021-32010 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.

A successful exploit results in complete confidentiality breach (data exposure), full integrity compromise (data manipulation), availability disruption (denial of service), with a CVSS base score of 8.1.

CVSS v3.1 Vector Breakdown

Exploitability

Attack VectorNetwork

Attack ComplexityHigh

Privileges Req.None

User InteractionNone

ScopeUnchanged

Impact

ConfidentialityHigh

IntegrityHigh

AvailabilityHigh

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected Vendors & Products

secomea27 product(s)

sitemanager 1129 firmwaresitemanager 1129sitemanager 1139 firmwaresitemanager 1139sitemanager 1149 firmwaresitemanager 1149sitemanager 3329 firmwaresitemanager 3329sitemanager 3339 firmwaresitemanager 3339sitemanager 3349 firmwaresitemanager 3349+15

Source: NVD CPE · 27 total CPE entries