CVE-2020-13712 — MGOS Command Injection

CVE-2020-13712

MGOS Command Injection PUBLISHED

Description (CNA)

A command injection is possible through the user interface, allowing arbitrary command execution as the root user. oMG2000 running MGOS 3.15.1 or earlier is affected. MG90 running MGOS 4.2.1 or earlier is affected.

Affected (CNA)

Vendor / product	Versions
Sierra Wireless / MGOS	affected all versions before 3.15.1
Sierra Wireless / MGOS	affected all versions before 4.2.1

CWE

CWE-78

References

https://source.sierrawireless.com/-/media/support_downloads/security-bulletins/pdf/swi-psa-2020-006---mgos-security-update.ashx

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.