CVE-2020-13712 - CVE House

Status published Unknown CVE-2020-13712

MGOS Command Injection

0 CVSS

Vulnerability Description

A command injection is possible through the user interface, allowing arbitrary command execution as the root user. oMG2000 running MGOS 3.15.1 or earlier is affected. MG90 running MGOS 4.2.1 or earlier is affected.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-13712

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

https://source.sierrawireless.com/-/media/support_downloads/security-bulletins/pdf/swi-psa-2020-006---mgos-security-update.ashx

More from Sierra Wireless

View All →

CVE-2023-31280

Exposure of Sensitive Information to an Unauthorized Actor

Medium 5.3

CVE-2023-31279

Improper Authentication

High 8.1

Affected Vendor

Sierra Wireless

View all reports →

Affected Software

MGOS

Vulnerable Versions:

all versions before 3.15.1, all versions before 4.2.1

Timeline

Official Publish: December 20th, 2024

Last Modified: December 26th, 2024

Added to House: July 21st, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

CWE-78

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application

Initial Access

T1059 Command and Scripting Interpreter

Execution

T1068 Exploitation for Privilege Escalation

Privilege Escalation

T1005 Data from Local System

Collection

T1041 Exfiltration Over C2 Channel

Exfiltration