CVE-2020-12843

ismartgate PRO 1.5.9 is vulnerable to malicious file uploads via the form for uploading sounds to garage doors. The magic bytes for WAV must be used.

CVSS v3.1 NVD

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0 NVD

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

1.31% chance of exploitation in the next 30 days, 70th percentile

Published

2020-09-24

Updated

2024-08-04

Proof-of-concept exploits (1)

• https://kth.diva-portal.org/smash/get/diva2:1464458/FULLTEXT01.pdf

Security advisories

• https://ismartgate.com/secure-garage-door

References

• CVE Record
• NVD entry