Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2020-13712

MGOS Command Injection

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
SWI

Description

A command injection is possible through the user interface, allowing arbitrary command execution as the root user. oMG2000 running MGOS 3.15.1 or earlier is affected.  MG90 running MGOS 4.2.1 or earlier is affected.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Sierra Wireless MGOS

Default version status: unaffected

  • all versions before 3.15.1affected

Sierra Wireless MGOS

Default version status: unaffected

  • all versions before 4.2.1affected

References