PatchTheCVEozeki ng sms gateway vulnerabilities and fixes
Recent CVEs affecting ozeki ng sms gateway, with upgrade or downgrade steps. 11 tracked.
Also searched as: ozekingsmsgateway.
ozeki ng sms gateway has 11 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 11. Most recent: 2020-09-30. Highest priority: CVE-2020-14022 (score 56/100).
- CVE-2020-14031 HIGH 7.2 UPGRADE An issue was discovered in Ozeki NG SMS Gateway through 4.17.6
- CVE-2020-14030 HIGH 7.2 UPGRADE An issue was discovered in Ozeki NG SMS Gateway through 4.17.6
- CVE-2020-14029 HIGH 7.5 UPGRADE An issue was discovered in Ozeki NG SMS Gateway through 4.17.6
- CVE-2020-14028 HIGH 7.2 UPGRADE An issue was discovered in Ozeki NG SMS Gateway through 4.17.6
- CVE-2020-14027 MEDIUM 5.3 UPGRADE An issue was discovered in Ozeki NG SMS Gateway through 4.17.6
- CVE-2020-14026 HIGH 8.8 UPGRADE CSV Injection (aka Excel Macro Injection or Formula Injection) exists in the Export Of Contacts feature in Oze
- CVE-2020-14025 HIGH 8.8 UPGRADE Ozeki NG SMS Gateway through 4.17.6 has multiple CSRF vulnerabilities
- CVE-2020-14024 MEDIUM 6.1 UPGRADE Ozeki NG SMS Gateway through 4.17.6 has multiple authenticated stored and/or reflected XSS vulnerabilities via
- CVE-2020-14023 MEDIUM 4.9 UPGRADE Ozeki NG SMS Gateway through 4.17.6 allows SSRF via SMS WCF or RSS To SMS.
- CVE-2020-14022 HIGH 8.8 UPGRADE Ozeki NG SMS Gateway 4.17.1 through 4.17.6 does not check the file type when bulk importing new contacts ("Imp
- CVE-2020-14021 MEDIUM 4.9 UPGRADE An issue was discovered in Ozeki NG SMS Gateway through 4.17.6
FAQ
How do I fix ozeki ng sms gateway vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is ozeki ng sms gateway being exploited right now?
None of the tracked ozeki ng sms gateway CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which ozeki ng sms gateway CVE should I patch first?
CVE-2020-14022 currently ranks highest (56/100): Ozeki NG SMS Gateway 4.17.1 through 4.17.6 does not check the file type when bulk importing new contacts ("Imp.