Vulnerability Description
The S. Siedle & Soehne SG 150-0 Smart Gateway before 1.2.4 allows remote code execution via the backup functionality in the web frontend. By using an exploit chain, an attacker with access to the network can get root access on the gateway.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Siedle | Sg 150-0 Firmware | < 1.2.4 |
| Siedle | Sg 150-0 | - |
Related Weaknesses (CWE)
References
- https://research.hisolutions.com/2020/04/open-the-gates-insecurity-of-cloudless-ExploitThird Party Advisory
- https://research.hisolutions.com/2020/04/open-the-gates-insecurity-of-cloudless-ExploitThird Party Advisory
FAQ
What is CVE-2020-9474?
CVE-2020-9474 is a vulnerability with a CVSS score of 8.8 (HIGH). The S. Siedle & Soehne SG 150-0 Smart Gateway before 1.2.4 allows remote code execution via the backup functionality in the web frontend. By using an exploit chain, an attacker with access to the netw...
How severe is CVE-2020-9474?
CVE-2020-9474 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2020-9474?
Check the references section above for vendor advisories and patch information. Affected products include: Siedle Sg 150-0 Firmware, Siedle Sg 150-0.