CVE-2020-14030

An issue was discovered in Ozeki NG SMS Gateway through 4.17.6

published September 29, 2020

CVSS
—
EPSS
2%
Percentile
78.8
In the wild
Unconfirmed
What it is

An issue was discovered in Ozeki NG SMS Gateway through 4.17.6. It stores SMS messages in .NET serialized format on the filesystem. By generating (and writing to the disk) malicious .NET serialized files, an attacker can trick the product into deserializing them, resulting in arbitrary code execution.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01836 · 78.8th percentile
Published
2020-09-29T13:08Z
EPSS history
Timeline
  • 29 SEP 13:08Z
    An issue was discovered in Ozeki NG SMS Gateway through 4.17.6
    cvelistv5