CVE-2020-14027

An issue was discovered in Ozeki NG SMS Gateway through 4.17.6

published September 22, 2020

CVSS
—
EPSS
1%
Percentile
57.5
In the wild
Unconfirmed
What it is

An issue was discovered in Ozeki NG SMS Gateway through 4.17.6. The database connection strings accept custom unsafe arguments, such as ENABLE_LOCAL_INFILE, that can be leveraged by attackers to enable MySQL Load Data Local (rogue MySQL server) attacks.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00843 · 57.5th percentile
Published
2020-09-22T17:23Z
EPSS history
Timeline
  • 22 SEP 17:23Z
    An issue was discovered in Ozeki NG SMS Gateway through 4.17.6
    cvelistv5