Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-9436 State: PUBLISHED Published: 2020-03-12T13:22:42 Last Updated: 2024-08-04T10:26:16.212Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHOENIX CONTACT TC ROUTER 3002T-4G through 2.05.3, TC ROUTER 2002T-3G through 2.05.3, TC ROUTER 3002T-4G VZW through 2.05.3, TC ROUTER 3002T-4G ATT through 2.05.3, TC CLOUD CLIENT 1002-4G through 2.03.17, and TC CLOUD CLIENT 1002-TXTX through 1.03.17 devices allow authenticated users to inject system commands through a modified POST request to a specific URL. Additional Analyst Notes: - CVE Program Container: References: - https://cert.vde.com/en-us/advisories/ - https://cert.vde.com/en-us/advisories/vde-2020-003 - http://secl
References: - https://cert.vde.com/en-us/advisories/ - https://cert.vde.com/en-us/advisories/vde-2020-003 - http://seclists.org/fulldisclosure/2020/Mar/15 - http://packetstormsecurity.com/files/156729/Phoenix-Contact-TC-Router-TC-Cloud-Client-Command-Injection.html
CVE ID: CVE-2020-9437 State: PUBLISHED Published: 2020-06-25T19:35:18 Last Updated: 2024-08-04T10:26:16.213Z Vendors: n/a Products: n/a Problem Types: n/a Description: SecureAuth.aspx in SecureAuth IdP 9.3.0 suffers from a client-side template injection that allows for script execution, in the same manner as XSS. Additional Analyst Notes: - CVE Program Container: References: - https://know.bishopfox.com/advisories - https://docs.secureauth.com/display/SID/SecureAuth+IdP+Latest+Releases - https://labs.bishopfox.com/advisories/secureauth-version-9.3
CVE ID: CVE-2020-9438 State: PUBLISHED Published: 2020-06-23T14:31:58 Last Updated: 2024-08-04T10:26:16.183Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tinxy Door Lock with firmware before 3.2 allow attackers to unlock a door by replaying an Unlock request that occurred when the attacker was previously authorized. In other words, door-access revocation is mishandled. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40avishek_75733/smart-products-are-always-not-that-smart-tinxy-smart-door-lock-vulnerability-97f91e435e06
CVE ID: CVE-2020-9439 State: PUBLISHED Published: 2020-12-23T15:47:14 Last Updated: 2024-08-04T10:26:16.177Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Uncanny Owl Tin Canny LearnDash Reporting before 3.4.4 allows authenticated remote attackers to inject arbitrary web script or HTML via the search_key GET Parameter in TinCan_Content_List_Table.php, message GET Parameter in licensing.php, tc_filter_group parameter in reporting-admin-menu.php, tc_filter_user parameter in reporting-admin-menu.php, tc_filter_course parameter in reporting-admin-menu.php, tc_filter_lesson parameter in reporting-admin-menu.php, tc_filter_module
_course parameter in reporting-admin-menu.php, tc_filter_lesson parameter in reporting-admin-menu.php, tc_filter_module parameter in reporting-admin-menu.php, tc_filter_action parameter in reporting-admin-menu.php, tc_filter_data_range parameter in reporting-admin-menu.php, or tc_filter_data_range_last parameter in reporting-admin-menu.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.uncannyowl.com/knowledge-base/tin-canny-learndash-reporting-changelog/ - https://gist.github.com/michiiii/9501b878e7ba3c9fc2a7407ff8277fa5
CVE ID: CVE-2020-9440 State: PUBLISHED Published: 2020-03-10T16:57:12 Last Updated: 2024-08-04T10:26:16.100Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in the WSC plugin through 5.5.7.5 for CKEditor 4 allows remote attackers to run arbitrary web script inside an IFRAME element by injecting a crafted HTML element into the editor. Additional Analyst Notes: - CVE Program Container: References: - https://ckeditor.com/blog/CKEditor-4.14-with-Paste-from-LibreOffice-released/#security-issues-fixed - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7OJ4BSS3VEAEXPNSOOUAXX6RDNECGZNO/ - https://li
ject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7OJ4BSS3VEAEXPNSOOUAXX6RDNECGZNO/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M4HHYQ6N452XTCIROFMJOTYEUWSB6FR4/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L322YA73LCV3TO7ORY45WQDAFJVNKXBE/
CVE ID: CVE-2020-9442 State: PUBLISHED Published: 2020-02-28T13:40:41 Last Updated: 2024-08-04T10:26:16.103Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenVPN Connect 3.1.0.361 on Windows has Insecure Permissions for %PROGRAMDATA%\OpenVPN Connect\drivers\tap\amd64\win10, which allows local users to gain privileges by copying a malicious drvstore.dll there. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/hessandrew/CVE-2020-9442
CVE ID: CVE-2020-9443 State: PUBLISHED Published: 2020-03-18T12:20:59 Last Updated: 2024-08-04T10:26:16.113Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zulip Desktop before 4.0.3 loaded untrusted content in an Electron webview with web security disabled, which can be exploited for XSS in a number of ways. This especially affects Zulip Desktop 2.3.82. Additional Analyst Notes: - CVE Program Container: References: - https://blog.zulip.org/2020/02/29/zulip-desktop-4-0-3-security-release/
CVE ID: CVE-2020-9444 State: PUBLISHED Published: 2020-04-20T19:49:16 Last Updated: 2024-08-04T10:26:16.275Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zulip Server before 2.1.3 allows reverse tabnabbing via the Markdown functionality. Additional Analyst Notes: - CVE Program Container: References: - https://blog.zulip.org/2020/04/01/zulip-server-2-1-3-security-release/
CVE ID: CVE-2020-9445 State: PUBLISHED Published: 2020-04-20T19:51:25 Last Updated: 2024-08-04T10:26:16.112Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zulip Server before 2.1.3 allows XSS via the modal_link feature in the Markdown functionality. Additional Analyst Notes: - CVE Program Container: References: - https://blog.zulip.org/2020/04/01/zulip-server-2-1-3-security-release/
CVE ID: CVE-2020-9447 State: PUBLISHED Published: 2020-02-28T15:07:46 Last Updated: 2024-08-04T10:26:16.101Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is an XSS (cross-site scripting) vulnerability in GwtUpload 1.0.3 in the file upload functionality. Someone can upload a file with a malicious filename, which contains JavaScript code, which would result in XSS. Cross-site scripting enables attackers to steal data, change the appearance of a website, and perform other malicious activities like phishing or drive-by hacking. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/manolo/gwtupload/issues/32 - https://www.coresecurity.com/advisori
E Program Container: References: - https://github.com/manolo/gwtupload/issues/32 - https://www.coresecurity.com/advisories/gwtupload-xss-file-upload-functionality
CVE ID: CVE-2020-9449 State: PUBLISHED Published: 2020-02-28T20:19:43 Last Updated: 2024-08-04T10:26:16.125Z Vendors: n/a Products: n/a Problem Types: n/a Description: An insecure random number generation vulnerability in BlaB! AX, BlaB! AX Pro, BlaB! WS (client), and BlaB! WS Pro (client) version 19.11 allows an attacker (with a guest or user session cookie) to escalate privileges by retrieving the cookie salt value and creating a valid session cookie for an arbitrary user or admin. Additional Analyst Notes: - CVE Program Container: References: - https://justblab.com/latest-news
CVE ID: CVE-2020-9450 State: PUBLISHED Published: 2021-05-25T11:08:01 Last Updated: 2024-08-04T10:26:16.219Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Acronis True Image 2020 24.5.22510. anti_ransomware_service.exe exposes a REST API that can be used by everyone, even unprivileged users. This API is used to communicate from the GUI to anti_ransomware_service.exe. This can be exploited to add an arbitrary malicious executable to the whitelist, or even exclude an entire drive from being monitored by anti_ransomware_service.exe. Additional Analyst Notes: - CVE Program Container: References: - https://www.acronis.com - https://danishcyberdefence.dk/blo
tional Analyst Notes: - CVE Program Container: References: - https://www.acronis.com - https://danishcyberdefence.dk/blog - https://madsjoensen.dk/cve-2020-9450/
CVE ID: CVE-2020-9451 State: PUBLISHED Published: 2021-05-25T11:01:41 Last Updated: 2024-08-04T10:26:16.116Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Acronis True Image 2020 24.5.22510. anti_ransomware_service.exe keeps a log in a folder where unprivileged users have write permissions. The logs are generated in a predictable pattern, allowing an unprivileged user to create a hardlink from a (not yet created) log file to anti_ransomware_service.exe. On reboot, this forces the anti_ransomware_service to try to write its log into its own process, crashing in a SHARING VIOLATION. This crash occurs on every reboot. Additional Analyst Notes: - CVE Progr
s own process, crashing in a SHARING VIOLATION. This crash occurs on every reboot. Additional Analyst Notes: - CVE Program Container: References: - https://www.acronis.com - https://danishcyberdefence.dk/blog - https://madsjoensen.dk/cve-2020-9451/
CVE ID: CVE-2020-9452 State: PUBLISHED Published: 2021-05-25T11:21:58 Last Updated: 2024-08-04T10:26:16.212Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Acronis True Image 2020 24.5.22510. anti_ransomware_service.exe includes functionality to quarantine files by copying a suspected ransomware file from one directory to another using SYSTEM privileges. Because unprivileged users have write permissions in the quarantine folder, it is possible to control this privileged write with a hardlink. This means that an unprivileged user can write/overwrite arbitrary files in arbitrary folders. Escalating privileges to SYSTEM is trivial with arbitrary writes. Wh
ite/overwrite arbitrary files in arbitrary folders. Escalating privileges to SYSTEM is trivial with arbitrary writes. While the quarantine feature is not enabled by default, it can be forced to copy the file to the quarantine by communicating with anti_ransomware_service.exe through its REST API. Additional Analyst Notes: - CVE Program Container: References: - https://www.acronis.com - https://danishcyberdefence.dk/blog - https://madsjoensen.dk/cve-2020-9452/
CVE ID: CVE-2020-9453 State: PUBLISHED Published: 2021-02-05T19:07:26 Last Updated: 2024-08-04T10:26:16.293Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Epson iProjection v2.30, the driver file EMP_MPAU.sys allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9C402406 and IOCtl 0x9C40240A. (0x9C402402 has only a NULL pointer dereference.) This affects \Device\EMPMPAUIO and \DosDevices\EMPMPAU. Additional Analyst Notes: - CVE Program Container: References: - https://epson.com - https://github.com/FULLSHADE/Kernel-exploits - https://github.com/FULLSHADE/Kernel-exploits/tree/master/
s://epson.com - https://github.com/FULLSHADE/Kernel-exploits - https://github.com/FULLSHADE/Kernel-exploits/tree/master/EMP_MPAU.sys - https://epson.com/Support/wa00936
CVE ID: CVE-2020-9454 State: PUBLISHED Published: 2020-03-06T18:43:13 Last Updated: 2024-08-04T10:26:16.368Z Vendors: n/a Products: n/a Problem Types: n/a Description: A CSRF vulnerability in the RegistrationMagic plugin through 4.6.0.3 for WordPress allows remote attackers to forge requests on behalf of a site administrator to change all settings for the plugin, including deleting users, creating new roles with escalated privileges, and allowing PHP file uploads via forms. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/custom-registration-form-builder-with-submission-manager/#developers - https://wpvulndb.com/vulnerabilities/10116 - https://ww
-registration-form-builder-with-submission-manager/#developers - https://wpvulndb.com/vulnerabilities/10116 - https://www.wordfence.com/blog/2020/03/multiple-vulnerabilities-patched-in-registrationmagic-plugin/
CVE ID: CVE-2020-9455 State: PUBLISHED Published: 2020-03-06T18:49:50 Last Updated: 2024-08-04T10:26:16.213Z Vendors: n/a Products: n/a Problem Types: n/a Description: The RegistrationMagic plugin through 4.6.0.3 for WordPress allows remote authenticated users (with minimal privileges) to send arbitrary emails on behalf of the site via class_rm_user_services.php send_email_user_view. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/custom-registration-form-builder-with-submission-manager/#developers - https://wpvulndb.com/vulnerabilities/10116 - https://www.wordfence.com/blog/2020/03/multiple-vulnerabilities-patched-in-registrationmagic-plugin/
CVE ID: CVE-2020-9456 State: PUBLISHED Published: 2020-03-06T18:54:07 Last Updated: 2024-08-04T10:26:16.191Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the RegistrationMagic plugin through 4.6.0.3 for WordPress, the user controller allows remote authenticated users (with minimal privileges) to elevate their privileges to administrator via class_rm_user_controller.php rm_user_edit. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/custom-registration-form-builder-with-submission-manager/#developers - https://wpvulndb.com/vulnerabilities/10116 - https://www.wordfence.com/blog/2020/03/multiple-vulnerabilities-patched-in-registratio
ulndb.com/vulnerabilities/10116 - https://www.wordfence.com/blog/2020/03/multiple-vulnerabilities-patched-in-registrationmagic-plugin/
CVE ID: CVE-2020-9457 State: PUBLISHED Published: 2020-03-06T18:56:35 Last Updated: 2024-08-04T10:26:16.225Z Vendors: n/a Products: n/a Problem Types: n/a Description: The RegistrationMagic plugin through 4.6.0.3 for WordPress allows remote authenticated users (with minimal privileges) to import custom vulnerable forms and change form settings via class_rm_form_settings_controller.php, resulting in privilege escalation. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/custom-registration-form-builder-with-submission-manager/#developers - https://wpvulndb.com/vulnerabilities/10116 - https://www.wordfence.com/blog/2020/03/multiple-vulnerabilities-p
elopers - https://wpvulndb.com/vulnerabilities/10116 - https://www.wordfence.com/blog/2020/03/multiple-vulnerabilities-patched-in-registrationmagic-plugin/
CVE ID: CVE-2020-9458 State: PUBLISHED Published: 2020-03-06T18:58:53 Last Updated: 2024-08-04T10:26:16.182Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the RegistrationMagic plugin through 4.6.0.3 for WordPress, the export function allows remote authenticated users (with minimal privileges) to export submitted form data and settings via class_rm_form_controller.php rm_form_export. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/custom-registration-form-builder-with-submission-manager/#developers - https://wpvulndb.com/vulnerabilities/10116 - https://www.wordfence.com/blog/2020/03/multiple-vulnerabilities-patched-in-registratio
CVE ID: CVE-2020-9459 State: PUBLISHED Published: 2020-02-28T20:51:53 Last Updated: 2024-08-04T10:26:16.249Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple Stored Cross-site scripting (XSS) vulnerabilities in the Webnus Modern Events Calendar Lite plugin through 5.1.6 for WordPress allows remote authenticated users (with minimal permissions) to inject arbitrary JavaScript, HTML, or CSS via Ajax actions. This affects mec_save_notifications and import_settings. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/10100 - https://www.wordfence.com/blog/2020/02/site-takeover-campaign-exploits-multiple-zero-day-vulnerabilities/
CVE ID: CVE-2020-9460 State: PUBLISHED Published: 2020-04-14T14:32:53 Last Updated: 2024-08-04T10:26:16.271Z Vendors: n/a Products: n/a Problem Types: n/a Description: Octech Oempro 4.7 through 4.11 allow XSS by an authenticated user. The parameter CampaignName in Campaign.Create is vulnerable. Additional Analyst Notes: - CVE Program Container: References: - https://www.octeth.com/ - https://github.com/Guilherme-Rubert/CVE-2020-9460 - https://guilhermerubert.com/blog/cve-2020-9461/
CVE ID: CVE-2020-9461 State: PUBLISHED Published: 2020-04-14T14:35:52 Last Updated: 2024-08-04T10:26:16.111Z Vendors: n/a Products: n/a Problem Types: n/a Description: Octech Oempro 4.7 through 4.11 allow stored XSS by an authenticated user. The FolderName parameter of the Media.CreateFolder command is vulnerable. Additional Analyst Notes: - CVE Program Container: References: - https://www.octeth.com/ - https://github.com/Guilherme-Rubert/CVE-2020-9461 - https://guilhermerubert.com/blog/cve-2020-9460/
CVE ID: CVE-2020-9462 State: PUBLISHED Published: 2020-06-04T15:49:28 Last Updated: 2024-08-04T10:26:16.121Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in all Athom Homey and Homey Pro devices up to the current version 4.2.0. An attacker within RF range can obtain a cleartext copy of the network configuration of the device, including the Wi-Fi PSK, during device setup. Upon success, the attacker is able to further infiltrate the target's Wi-Fi networks. Additional Analyst Notes: - CVE Program Container: References: - https://developer.athom.com/firmware
CVE ID: CVE-2020-9463 State: PUBLISHED Published: 2020-02-28T17:55:22 Last Updated: 2024-08-04T10:26:16.163Z Vendors: n/a Products: n/a Problem Types: n/a Description: Centreon 19.10 allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in the server_ip field in JSON data in an api/internal.php?object=centreon_configuration_remote request. Additional Analyst Notes: - CVE Program Container: References: - https://code610.blogspot.com/2020/02/postauth-rce-in-centreon-1910.html
CVE ID: CVE-2020-9464 State: PUBLISHED Published: 2020-03-12T13:28:53 Last Updated: 2024-08-04T10:26:16.110Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Denial-of-Service vulnerability exists in BECKHOFF Ethernet TCP/IP Bus Coupler BK9000. After an attack has occurred, the device's functionality can be restored by rebooting. Additional Analyst Notes: - CVE Program Container: References: - https://cert.vde.com/en-us/advisories/vde-2020-005
CVE ID: CVE-2020-9465 State: PUBLISHED Published: 2020-02-28T19:32:53 Last Updated: 2024-08-04T10:26:16.112Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in EyesOfNetwork eonweb 5.1 through 5.3 before 5.3-3. The eonweb web interface is prone to a SQL injection, allowing an unauthenticated attacker to perform various tasks such as authentication bypass via the user_id field in a cookie. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/EyesOfNetworkCommunity/eonweb/issues/51 - https://github.com/EyesOfNetworkCommunity/eonweb/releases/tag/5.3-3
CVE ID: CVE-2020-9466 State: PUBLISHED Published: 2020-02-28T19:42:03 Last Updated: 2024-08-04T10:26:16.211Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Export Users to CSV plugin through 1.4.2 for WordPress allows CSV Injection. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/10094 - https://www.getastra.com/blog/911/plugin-exploit/csv-injection-in-export-users-to-csv-wordpress-plugin/ - https://www.jinsonvarghese.com/csv-injection-in-export-users-to-csv-plugin/
CVE ID: CVE-2020-9467 State: PUBLISHED Published: 2020-03-26T19:09:27 Last Updated: 2024-08-04T10:26:16.384Z Vendors: n/a Products: n/a Problem Types: n/a Description: Piwigo 2.10.1 has stored XSS via the file parameter in a /ws.php request because of the pwg.images.setInfo function. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Piwigo/Piwigo/issues/1168 - http://packetstormsecurity.com/files/159191/Piwigo-2.10.1-Cross-Site-Scripting.html
CVE ID: CVE-2020-9468 State: PUBLISHED Published: 2020-03-26T19:12:15 Last Updated: 2024-08-04T10:26:16.262Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Community plugin 2.9.e-beta for Piwigo allows users to set image information on images in albums for which they do not have permission, by manipulating the image_id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://piwigo.org/ext/extension_view.php?eid=303 - https://github.com/plegall/Piwigo-community/issues/49
CVE ID: CVE-2020-9470 State: PUBLISHED Published: 2020-03-07T00:20:48 Last Updated: 2024-08-04T10:26:16.364Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Wing FTP Server 6.2.5 before February 2020. Due to insecure permissions when handling session cookies, a local user may view the contents of the session and session_admin directories, which expose active session cookies within the Wing FTP HTTP interface and administration panel. These cookies may be used to hijack user and administrative sessions, including the ability to execute Lua commands as root within the administration panel. Additional Analyst Notes: - CVE Program Container: References: - ht
ua commands as root within the administration panel. Additional Analyst Notes: - CVE Program Container: References: - https://www.hooperlabs.xyz/disclosures/cve-2020-9470.php
CVE ID: CVE-2020-9471 State: PUBLISHED Published: 2020-03-16T19:44:06 Last Updated: 2024-08-04T10:26:16.193Z Vendors: n/a Products: n/a Problem Types: n/a Description: Umbraco Cloud 8.5.3 allows an authenticated file upload (and consequently Remote Code Execution) via the Install Packages functionality. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/eLeN3Re/cve-2020-9471
CVE ID: CVE-2020-9472 State: PUBLISHED Published: 2020-03-16T19:47:06 Last Updated: 2024-08-04T10:26:16.356Z Vendors: n/a Products: n/a Problem Types: n/a Description: Umbraco CMS 8.5.3 allows an authenticated file upload (and consequently Remote Code Execution) via the Install Package functionality. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/eLeN3Re/cve-2020-9472
CVE ID: CVE-2020-9473 State: PUBLISHED Published: 2020-04-06T14:56:28 Last Updated: 2024-08-04T10:26:16.112Z Vendors: n/a Products: n/a Problem Types: n/a Description: The S. Siedle & Soehne SG 150-0 Smart Gateway before 1.2.4 has a passwordless ftp ssh user. By using an exploit chain, an attacker with access to the network can get root access on the gateway. Additional Analyst Notes: - CVE Program Container: References: - https://research.hisolutions.com/2020/04/open-the-gates-insecurity-of-cloudless-smart-door-systems/
CVE ID: CVE-2020-9474 State: PUBLISHED Published: 2020-05-07T20:22:59 Last Updated: 2024-08-04T10:26:16.189Z Vendors: n/a Products: n/a Problem Types: n/a Description: The S. Siedle & Soehne SG 150-0 Smart Gateway before 1.2.4 allows remote code execution via the backup functionality in the web frontend. By using an exploit chain, an attacker with access to the network can get root access on the gateway. Additional Analyst Notes: - CVE Program Container: References: - https://research.hisolutions.com/2020/04/open-the-gates-insecurity-of-cloudless-smart-door-systems/
CVE ID: CVE-2020-9475 State: PUBLISHED Published: 2020-05-07T20:29:15 Last Updated: 2024-08-04T10:26:16.176Z Vendors: n/a Products: n/a Problem Types: n/a Description: The S. Siedle & Soehne SG 150-0 Smart Gateway before 1.2.4 allows local privilege escalation via a race condition in logrotate. By using an exploit chain, an attacker with access to the network can get root access on the gateway. Additional Analyst Notes: - CVE Program Container: References: - https://research.hisolutions.com/2020/04/open-the-gates-insecurity-of-cloudless-smart-door-systems/