CVE-2020-14031 An issue was discovered in Ozeki NG SMS Gateway through 4.17.6. The outbox functionality of the TXT File module can be used to delete all/most files in a folder. Because the product usually runs as NT...
HighCVSS 7.2
EPSS 1.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An issue was discovered in Ozeki NG SMS Gateway through 4.17.6. The outbox functionality of the TXT File module can be used to delete all/most files in a folder. Because the product usually runs as NT AUTHORITY\SYSTEM, the only files that will not be deleted are those currently being run by the system and/or files that have special security attributes (e.g., Windows Defender files).
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ozeki ng sms gateway | <= 4.17.6 | No fix listed |
References
- www.ozeki.hu vendor-advisory
- github.com exploit third-party-advisory