{"id":"CVE-2020-13712","state":"PUBLISHED","title":"MGOS Command Injection","description":"A command injection is possible through the user interface, allowing arbitrary command execution as \nthe root user. oMG2000 running MGOS 3.15.1 or earlier is affected. \n\nMG90 running MGOS 4.2.1 or earlier is affected.","publishedAt":"2024-12-20T21:37:35.021Z","updatedAt":"2024-12-26T19:29:55.387Z","severity":{"score":7.8,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","source":"CISA-ADP"},"assigner":"SWI","products":["Sierra Wireless MGOS"],"affected":[{"vendor":"Sierra Wireless","product":"MGOS","defaultStatus":"unaffected","versions":[{"version":"all versions before 3.15.1","status":"affected","versionType":"Custom"}],"platforms":["oMG2000"]},{"vendor":"Sierra Wireless","product":"MGOS","defaultStatus":"unaffected","versions":[{"version":"all versions before 4.2.1","status":"affected","versionType":"Custom"}],"platforms":["MG90"]}],"references":["https://source.sierrawireless.com/-/media/support_downloads/security-bulletins/pdf/swi-psa-2020-006---mgos-security-update.ashx"],"weaknesses":["CWE-78","CWE-77"],"ingestedAt":"2026-10-29T19:46:30.825Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2020/13xxx/CVE-2020-13712.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2020-13712","state":"PUBLISHED","datePublished":"2024-12-20T21:37:35.021Z","dateUpdated":"2024-12-26T19:29:55.387Z","assignerShortName":"SWI","assignerOrgId":"747bec18-acd0-4d99-a5c8-5e366c66ab7e","dateReserved":"2020-06-01T00:00:00.000Z"},"containers":{"cna":{"title":"MGOS Command Injection","descriptions":[{"lang":"en","value":"A command injection is possible through the user interface, allowing arbitrary command execution as \nthe root user. oMG2000 running MGOS 3.15.1 or earlier is affected. \n\nMG90 running MGOS 4.2.1 or earlier is affected."}],"affected":[{"vendor":"Sierra Wireless","product":"MGOS","defaultStatus":"unaffected","versions":[{"version":"all versions before 3.15.1","status":"affected","versionType":"Custom"}],"platforms":["oMG2000"]},{"vendor":"Sierra Wireless","product":"MGOS","defaultStatus":"unaffected","versions":[{"version":"all versions before 4.2.1","status":"affected","versionType":"Custom"}],"platforms":["MG90"]}],"references":[{"url":"https://source.sierrawireless.com/-/media/support_downloads/security-bulletins/pdf/swi-psa-2020-006---mgos-security-update.ashx"}],"problemTypes":[{"descriptions":[{"cweId":"CWE-78","description":"CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"SWI","orgId":"747bec18-acd0-4d99-a5c8-5e366c66ab7e","dateUpdated":"2024-12-20T21:37:35.021Z"},"datePublic":"2020-11-19T21:36:00.000Z","impacts":[{"descriptions":[{"lang":"en","value":"Command Injection"}]}],"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.2.0"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.8,"attackVector":"LOCAL","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"timestamp":"2024-12-26T19:28:59.870255Z","id":"CVE-2020-13712","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-77","type":"CWE","lang":"en","description":"CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')"}]}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-12-26T19:29:55.387Z"}}]}}}