CVE-2020-14021

MEDIUM 4.9CVE-2020-14021 · Published 18/09/2020 · updated 17/06/2026

In short

CVE-2020-14021 is a MEDIUM (CVSS 4.9) vulnerability affecting ozeki ng sms gateway (ozeki).
Chance of exploitation in the next 30 days (EPSS): 1.1%, higher than 66.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
ozeki ng sms gateway ozeki	`≤ 4.17.6`	No fix yet

Description

An issue was discovered in Ozeki NG SMS Gateway through 4.17.6. The ASP.net SMS module can be used to read and validate the source code of ASP files. By altering the path, it can be made to read any file on the Operating System, usually with NT AUTHORITY\SYSTEM privileges.

References

DrunkenShells/Disclosures · Exploit
ozeki.hu/index.php · Release Notes
ozeki.hu/index.php · Vendor Advisory

More vulnerabilities in ozeki ng sms gateway

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

ozeki ng sms gateway

ozeki

≤ 4.17.6

No fix yet

More vulnerabilities in ozeki ng sms gateway

See all →