CVEvulnerability

CVE-2020-13712

7.8 HIGH Published 2024-12-20 Modified 2026-06-17 Official page ↗

Status: Deferred
Published: 2024-12-20
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0): 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses: CWE-77, CWE-78

Description

A command injection is possible through the user interface, allowing arbitrary command execution as the root user. oMG2000 running MGOS 3.15.1 or earlier is affected. MG90 running MGOS 4.2.1 or earlier is affected.

Weakness · CWE (2)

CWE-77 Improper Neutralization of Special Elements used in a Command weakness
CWE-78 Improper Neutralization of Special Elements used in an OS Command weakness

References

https://source.sierrawireless.com/-/media/support_downloads/security-bulletins/pdf/swi-psa-2020-006---mgos-security-update.ashx source.sierrawireless.com

CVE-2020-13712

Description

Related

Weakness · CWE (2)

References