CVE-2020-14030

An issue was discovered in Ozeki NG SMS Gateway through 4.17.6. It stores SMS messages in .NET serialized format on the filesystem. By generating and writing to the disk malicious .NET serialized files, an attacker can trick the product into deserializing them, resulting in arbitrary code executi...

CVE-2020-14030

The CVE-2020-14030 issue affects Ozeki NG SMS Gateway (up to version 4.17.6). The vulnerability stems from storing SMS messages in .NET serialized format on the filesystem and then deserializing malicious .NET serialized files written to disk, which can trigger arbitrary code execution upon deser...