CVE-2020-13712CWE-78

MGOS Command Injection

High · published December 20, 2024

CVSS v3.1
7.8
EPSS
1%
Percentile
47.4
In the wild
Unconfirmed
What it is

A command injection is possible through the user interface, allowing arbitrary command execution as

the root user. oMG2000 running MGOS 3.15.1 or earlier is affected.

MG90 running MGOS 4.2.1 or earlier is affected.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00587 · 47.4th percentile
Weakness
CWE-78 · Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Published
2024-12-20T21:37Z
EPSS history
Timeline
  • 20 DEC 21:37Z
    MGOS Command Injection
    cvelistv5