CVE-2020-29023

Name of the Vulnerable Software and Affected Versions: Secomea GateManager versions prior to 9.3

Description: The issue is related to improper encoding or escaping of output from the CSV Report Generator, allowing an authenticated administrator to generate a CSV file that can run arbitrary commands on a victim's computer when opened in a spreadsheet program, such as Excel.

Recommendations: For Secomea GateManager versions prior to 9.3, update to version 9.3 or later to resolve the issue. As a temporary workaround, consider avoiding the use of the CSV Report Generator until a patch is applied. Restrict access to the CSV Report Generator feature to minimize the risk of exploitation.