CVE-2024-1579: Insufficient seeding of random number generator

Severity: high (CVSS 8.1 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-04-29 · updated 2026-06-17
Weakness: CWE-335

Description

Incorrect Usage of Seeds in Pseudo-Random Number Generator (PRNG) vulnerability in Secomea GateManager (Webserver modules) allows Session Hijacking.This issue affects GateManager: before 11.2.624071020.

Affected products

Secomea GateManager: before 11.2.62.4971020 — fixed in 11.2.62.4971020

How to fix

Upgrade to a fixed version: Secomea GateManager 11.2.62.4971020. Check the vendor advisory for mitigations.

References

https://www.secomea.com/support/cybersecurity-advisory/
https://www.secomea.com/support/cybersecurity-advisory/

Get alerted when CVE-2024-1579 or the next vulnerability affects your stack