What is CVE-2020-13712?

CVE-2020-13712 is a high-severity vulnerability in Sierra Wireless Mgos, classified under OS Command Injection. CVSS score: 7.8/10. Published 2024-12-20.

How severe is CVE-2020-13712?

High severity. CVSS v3 base score is 7.8 out of 10.

RCE in Sierra Wireless Mgos

CVE-2020-13712

A command injection is possible through the user interface, allowing arbitrary command execution as the root user. oMG2000 running MGOS 3.15.1 or earlier is affected. MG90 running MGOS 4.2.1 or earlier is affected.

Vulnerability class: Command Injection (OS Command Injection)

EPSS: 0.006 (44.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Sierra Wireless Mgos — versions all versions before 3.15.1, all versions before 4.2.1

Weakness classification (CWE)

CWE-78 — OS Command Injection
CWE-77 — Command Injection

References

security@sierrawireless.com

Frequently asked questions

What is CVE-2020-13712?: CVE-2020-13712 is a high-severity vulnerability in Sierra Wireless Mgos, classified under OS Command Injection. CVSS score: 7.8/10. Published 2024-12-20.
How severe is CVE-2020-13712?: High severity. CVSS v3 base score is 7.8 out of 10.