CVE-2020-12839 – ismartgate PRO 1.5.9 is vulnerable to privilege escalation by appending P

ismartgate PRO 1.5.9 is vulnerable to privilege escalation by appending PHP code to /cron/checkExpirationDate.php.

 

Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12839

Reference (s):

• https://ismartgate.com/secure-garage-door/
• https://kth.diva-portal.org/smash/get/diva2:1464458/FULLTEXT01.pdf