Paper/Archive/CVE-2020-12843

CVE-2020-12843

mitre — ismartgate PRO 1.5.9 is vulnerable to malicious file uploads via the form for uploading sounds to garage doors.

EPSS 1%CVSS 9.8

critical.is priorityof 100

44

CVSS 9.8 (NVD)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 70.6.706 × 2014.1 No public exploit+100.0 SSVC exploitation: unknown+100.0

Description · from the CVE record

ismartgate PRO 1.5.9 is vulnerable to malicious file uploads via the form for uploading sounds to garage doors. The magic bytes for WAV must be used.

Affected

ProductAffectedFixed inSource

n/an/a–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refismartgate.com/secure-garage-door refkth.diva-portal.org/smash/get/diva2:1464458/FULLTEXT01.pdf