Gogogate
Gogogate Ismartgate PRO Firmware: vulnerabilidades y CVE
Gogogate Ismartgate PRO Firmware tiene 11 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 4 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE11
Últimos 12 meses0
Críticas4
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2020-13119 | Alta (8.1) | 0.83% | — | 24 sept 2020 | ismartgate PRO 1.5.9 is vulnerable to clickjacking. |
| CVE-2020-12843 | Crítica (9.8) | 1.3% | — | 24 sept 2020 | ismartgate PRO 1.5.9 is vulnerable to malicious file uploads via the form for uploading sounds to garage doors. The magic bytes for WAV must be used. |
| CVE-2020-12842 | Crítica (9.8) | 1.5% | — | 24 sept 2020 | ismartgate PRO 1.5.9 is vulnerable to privilege escalation by appending PHP code to /cron/checkUserExpirationDate.php. |
| CVE-2020-12841 | Media (6.5) | 0.49% | — | 24 sept 2020 | ismartgate PRO 1.5.9 is vulnerable to CSRF that allows remote attackers to upload imae files via /index.php |
| CVE-2020-12840 | Media (6.5) | 0.49% | — | 24 sept 2020 | ismartgate PRO 1.5.9 is vulnerable to CSRF that allows remote attackers to upload sound files via /index.php |
| CVE-2020-12839 | Crítica (9.8) | 1.5% | — | 24 sept 2020 | ismartgate PRO 1.5.9 is vulnerable to privilege escalation by appending PHP code to /cron/checkExpirationDate.php. |
| CVE-2020-12838 | Crítica (9.8) | 1.5% | — | 24 sept 2020 | ismartgate PRO 1.5.9 is vulnerable to privilege escalation by appending PHP code to /cron/mailAdmin.php. |
| CVE-2020-12837 | Alta (7.5) | 0.93% | — | 24 sept 2020 | ismartgate PRO 1.5.9 is vulnerable to malicious file uploads via the form for uploading images to garage doors. The magic bytes of PNG must be used. |
| CVE-2020-12282 | Alta (8.8) | 0.50% | — | 24 sept 2020 | iSmartgate PRO 1.5.9 is vulnerable to CSRF via the busca parameter in the form used for searching for users, accessible via /index.php. (This can be combined with reflected XSS.) |
| CVE-2020-12281 | Media (6.5) | 0.49% | — | 24 sept 2020 | iSmartgate PRO 1.5.9 is vulnerable to CSRF that allows remote attackers to create a new user via /index.php. |
| CVE-2020-12280 | Media (6.5) | 0.49% | — | 24 sept 2020 | iSmartgate PRO 1.5.9 is vulnerable to CSRF that allows remote attackers to open/close a specified garage door/gate via /isg/opendoor.php. |