high7.2
CVE-2020-14028
An issue was discovered in Ozeki NG SMS Gateway through 4.17.6.
Impact
An issue was discovered in Ozeki NG SMS Gateway through 4.17.6. By leveraging a path traversal vulnerability in the Autoreply module's Script Name, an attacker may write to or overwrite arbitrary files, with arbitrary content, usually with NT AUTHORITY\SYSTEM privileges.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ozeki | Ozeki Ng Sms Gateway | through 4.17.6 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.ozeki.hu/index.php?owpn=231
- https://github.com/DrunkenShells/Disclosures/tree/master/CVE-2020-14028-Arbitary%20File%20Write-Ozeki%20SMS%20Gateway
- http://www.ozeki.hu/index.php?owpn=231
- https://github.com/DrunkenShells/Disclosures/tree/master/CVE-2020-14028-Arbitary%20File%20Write-Ozeki%20SMS%20Gateway