What is CVE-2020-9474?

CVE-2020-9474 is a high-severity vulnerability in Siedle Sg 150-0, classified under Download of Code Without Integrity Check. CVSS score: 8.8/10. Published 2020-05-07.

How severe is CVE-2020-9474?

High severity. CVSS v3 base score is 8.8 out of 10.

Vulnerability in Siedle Sg 150-0

CVE-2020-9474

The S. Siedle & Soehne SG 150-0 Smart Gateway before 1.2.4 allows remote code execution via the backup functionality in the web frontend. By using an exploit chain, an attacker with access to the network can get root access on the gateway.

EPSS: 0.019 (78.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Siedle Sg_150-0
Siedle Sg_150-0_firmware
N/a — versions n/a

Weakness classification (CWE)

CWE-494 — Download of Code Without Integrity Check

References

cve@mitre.org (Exploit, Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2020-9474?: CVE-2020-9474 is a high-severity vulnerability in Siedle Sg 150-0, classified under Download of Code Without Integrity Check. CVSS score: 8.8/10. Published 2020-05-07.
How severe is CVE-2020-9474?: High severity. CVSS v3 base score is 8.8 out of 10.