high7.2
CVE-2020-14031
An issue was discovered in Ozeki NG SMS Gateway through 4.17.6.
Impact
An issue was discovered in Ozeki NG SMS Gateway through 4.17.6. The outbox functionality of the TXT File module can be used to delete all/most files in a folder. Because the product usually runs as NT AUTHORITY\SYSTEM, the only files that will not be deleted are those currently being run by the system and/or files that have special security attributes (e.g., Windows Defender files).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ozeki | Ozeki Ng Sms Gateway | through 4.17.6 |
References
- NVD record
- CVE.org record
- http://www.ozeki.hu/index.php?owpn=231
- https://github.com/DrunkenShells/Disclosures/tree/master/CVE-2020-14031-Arbitary%20File%20Delete-Ozeki%20SMS%20Gateway
- http://www.ozeki.hu/index.php?owpn=231
- https://github.com/DrunkenShells/Disclosures/tree/master/CVE-2020-14031-Arbitary%20File%20Delete-Ozeki%20SMS%20Gateway