CVE-2020-14025

HIGH

Ozeki NG SMS Gateway <= 4.17.6 - Cross-Site Request Forgery

Title source: llm

Description

Ozeki NG SMS Gateway through 4.17.6 has multiple CSRF vulnerabilities. For example, an administrator, by following a link, can be tricked into making unwanted changes such as installing new modules or changing a password.

References (2)

Core 2

Core References

Product, Vendor Advisory x_refsource_misc

https://www.ozeki.hu/index.php?owpn=231

Exploit, Third Party Advisory x_refsource_misc

https://github.com/DrunkenShells/Disclosures/tree/master/CVE-2020-14025-Cross-Site%20Request%20Forgery-Ozeki%20SMS%20Gateway

Scores

CVSS v3 8.8

EPSS 0.0053

EPSS Percentile 41.2%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE

CWE-352

Status published

Products (1)

ozeki/ozeki_ng_sms_gateway < 4.17.6

Published Sep 22, 2020

Tracked Since Feb 18, 2026