Vulnerability Description
The S. Siedle & Soehne SG 150-0 Smart Gateway before 1.2.4 allows local privilege escalation via a race condition in logrotate. By using an exploit chain, an attacker with access to the network can get root access on the gateway.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Siedle | Sg 150-0 Firmware | < 1.2.4 |
| Siedle | Sg 150-0 | - |
Related Weaknesses (CWE)
References
- https://research.hisolutions.com/2020/04/open-the-gates-insecurity-of-cloudless-ExploitThird Party Advisory
- https://research.hisolutions.com/2020/04/open-the-gates-insecurity-of-cloudless-ExploitThird Party Advisory
FAQ
What is CVE-2020-9475?
CVE-2020-9475 is a vulnerability with a CVSS score of 7.0 (HIGH). The S. Siedle & Soehne SG 150-0 Smart Gateway before 1.2.4 allows local privilege escalation via a race condition in logrotate. By using an exploit chain, an attacker with access to the network can ge...
How severe is CVE-2020-9475?
CVE-2020-9475 has been rated HIGH with a CVSS base score of 7.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2020-9475?
Check the references section above for vendor advisories and patch information. Affected products include: Siedle Sg 150-0 Firmware, Siedle Sg 150-0.