PT-2020-13846 · Ozeki · Ozeki Ng Sms Gateway

Drunkenshells · Published 2020-09-22 · Updated 2020-09-26 · CVE-2020-14022

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Ozeki NG SMS Gateway versions 4.17.1 through 4.17.6

Description The issue concerns the "Import Contacts" functionality, which does not check the file type when bulk importing new contacts from a file. This allows an attacker to upload an executable or .bat file, which can then be executed using certain functionalities within the application, such as the "Application Starter" module.

Recommendations For Ozeki NG SMS Gateway versions 4.17.1 through 4.17.6, consider disabling the "Import Contacts" functionality until a patch is available to prevent the upload of malicious files. Additionally, restrict access to the "Application Starter" module to minimize the risk of exploitation.

Exploit

Fix

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2020-14022

Affected Products

Ozeki Ng Sms Gateway

References · 5

• 🔥 https://github.com/DrunkenShells/Disclosures/tree/master/CVE-2020-14022-Dangerous%20File%20Upload-Ozeki%20SMS%20Gateway · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-14022 · Security Note
• https://ozeki.hu/index.php?ow_page_number=1017&downloadaction=email&download_product_id=1&os=windows&dpath=%2Fattachments%2F702%2Finstallwindows_1590575794_OzekiNG-SMS-Gateway_4.17.6.zip&dname=Ozeki+NG+SMS+Gateway+v4.17.6&dsize=+%2817.8+MB%29&platform=Windows · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-14022 · Vendor Advisory
• https://ozeki.hu/index.php?owpn=231 · Vendor Advisory