CVE-2020-14030

2020-09-2913:08:12

mitre

www.cve.org

0.001 Low

EPSS

Percentile

45.8%

JSON

An issue was discovered in Ozeki NG SMS Gateway through 4.17.6. It stores SMS messages in .NET serialized format on the filesystem. By generating (and writing to the disk) malicious .NET serialized files, an attacker can trick the product into deserializing them, resulting in arbitrary code execution.