critical9.8
CVE-2020-12843
ismartgate PRO 1.5.9 is vulnerable to malicious file uploads via the form for uploading sounds to garage doors.
Impact
ismartgate PRO 1.5.9 is vulnerable to malicious file uploads via the form for uploading sounds to garage doors. The magic bytes for WAV must be used.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gogogate | Ismartgate Pro Firmware | Version 1.5.9 |