CVE-2020-13712

CVE-2020-13712: MGOS Command Injection

Vendor Sierra Wireless
Product MGOS
Weakness CWE-78
Published December 20, 2024
Last update December 26, 2024
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

A command injection is possible through the user interface, allowing arbitrary command execution as the root user. oMG2000 running MGOS 3.15.1 or earlier is affected.  MG90 running MGOS 4.2.1 or earlier is affected.

Key dates

02Disclosure timeline

December 20, 2024 CVE published
December 26, 2024 Record updated