Lucene search
+L

12 matches found

NVD
NVD
•added 2024/12/20 10:15 p.m.•22 views

CVE-2020-13712

A command injection is possible through the user interface, allowing arbitrary command execution as the root user. oMG2000 running MGOS 3.15.1 or earlier is affected. MG90 running MGOS 4.2.1 or earlier is affected...

7.8CVSS0.00587EPSS
SaveExploits0References1
CVE
CVE
•added 2024/12/20 9:37 p.m.•88 views

CVE-2020-13712

Sierra Wireless MGOS is vulnerable to a command injection flaw in its user interface, which allows an attacker to execute arbitrary commands with root privileges. The affected products include oMG2000 running MGOS version 3.15.1 or earlier and MG90 running MGOS version 4.2.1 or earlier. To remedi...

7.3AI score0.00587EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/12/20 9:37 p.m.•11 views

CVE-2020-13712 MGOS Command Injection

A command injection is possible through the user interface, allowing arbitrary command execution as the root user. oMG2000 running MGOS 3.15.1 or earlier is affected. MG90 running MGOS 4.2.1 or earlier is affected...

7.6AI score0.00587EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/12/20 9:37 p.m.•37 views

CVE-2020-13712 MGOS Command Injection

A command injection is possible through the user interface, allowing arbitrary command execution as the root user. oMG2000 running MGOS 3.15.1 or earlier is affected. MG90 running MGOS 4.2.1 or earlier is affected...

0.00587EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/20 12:00 a.m.•3 views

CVE-2020-13712: Improper Neutralization of Special Elements used in an OS Command

A command injection is possible through the user interface, allowing arbitrary command execution as the root user. oMG2000 running MGOS 3.15.1 or earlier is affected. MG90 running MGOS 4.2.1 or earlier is affected...

7.8CVSS6AI score0.00587EPSS
SaveExploits0References1
NVD
NVD
•added 2022/12/26 9:15 p.m.•26 views

CVE-2019-13988

Sierra Wireless MGOS before 3.15.2 and 4.x before 4.3 allows attackers to read log files via a Direct Request aka Forced Browsing...

6.5CVSS0.00376EPSS
SaveExploits0References2
Prion
Prion
•added 2022/12/26 9:15 p.m.•17 views

Design/Logic Flaw

Sierra Wireless MGOS before 3.15.2 and 4.x before 4.3 allows attackers to read log files via a Direct Request aka Forced Browsing...

3.3CVSS6.3AI score0.00376EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2022/12/26 12:00 a.m.•36 views

CVE-2019-13988

Sierra Wireless MGOS before 3.15.2 and 4.x before 4.3 allows attackers to read log files via a Direct Request aka Forced Browsing...

6.3AI score0.00376EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2022/12/26 12:00 a.m.•12 views

Sierra Wireless MGOS 安全漏洞

Sierra Wireless MGOS is a wireless communication device from Sierra Wireless Canada. A security vulnerability exists in Sierra Wireless MGOS versions prior to 3.15.2 and versions prior to 4.x through 4.3, which stems from a vulnerability that allows an attacker to read log files via Direct Reques...

6.5CVSS6.5AI score0.00376EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2022/12/26 12:00 a.m.•14 views

PT-2022-8092 · Sierra Wireless · Sierra Wireless Mgos

Name of the Vulnerable Software and Affected Versions: Sierra Wireless MGOS versions prior to 3.15.2 Sierra Wireless MGOS versions 4.x prior to 4.3 Description: The issue allows attackers to read log files via a Direct Request, also known as Forced Browsing. This can potentially expose sensitive...

6.5CVSS6.3AI score0.00376EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/26 12:00 a.m.•1 views

CVE-2019-13988: Undefined Security Weakness

Sierra Wireless MGOS before 3.15.2 and 4.x before 4.3 allows attackers to read log files via a Direct Request aka Forced Browsing...

6.5CVSS5.8AI score0.00376EPSS
SaveExploits0References1
CVE
CVE
•added 2022/12/26 12:00 a.m.•79 views

CVE-2019-13988

Summary of CVE-2019-13988 : Sierra Wireless MGOS is affected. Versions before 3.15.2, and 4.x before 4.3, allow attackers to read log files via a Direct Request (also known as Forced Browsing). The underlying issue enables unauthorized access to log data without authentication, as described acros...

6.5CVSS6.2AI score0.00376EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder