Skip to main content

Ismartgate Pro Firmware CVE-2020-13119

HIGH
Improper Restriction of Rendered UI Layers or Frames (CWE-1021)
2020-09-24 cve@mitre.org
XSS Ismartgate Pro Firmware
8.1
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
8.1 HIGH
AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
None
Integrity
High
Availability
High

Lifecycle Timeline

1
CVE Published
Sep 24, 2020 - 16:15 nvd
HIGH 8.1

DescriptionNVD

ismartgate PRO 1.5.9 is vulnerable to clickjacking.

AnalysisAI

ismartgate PRO 1.5.9 is vulnerable to clickjacking. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-1021. Affected products include: Gogogate Ismartgate Pro Firmware.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Ismartgate Pro Firmware

View all
CVE-2020-12843 CRITICAL POC
9.8 Sep 24

ismartgate PRO 1.5.9 is vulnerable to malicious file uploads via the form for uploading sounds to garage doors. Rated cr
CVE-2020-12842 CRITICAL POC
9.8 Sep 24

ismartgate PRO 1.5.9 is vulnerable to privilege escalation by appending PHP code to /cron/checkUserExpirationDate.php. R
CVE-2020-12839 CRITICAL POC
9.8 Sep 24

ismartgate PRO 1.5.9 is vulnerable to privilege escalation by appending PHP code to /cron/checkExpirationDate.php. Rated
CVE-2020-12838 CRITICAL POC
9.8 Sep 24

ismartgate PRO 1.5.9 is vulnerable to privilege escalation by appending PHP code to /cron/mailAdmin.php. Rated critical

CVE-2020-12282 HIGH POC
8.8 Sep 24

iSmartgate PRO 1.5.9 is vulnerable to CSRF via the busca parameter in the form used for searching for users, accessible

CVE-2020-12837 HIGH POC
7.5 Sep 24

ismartgate PRO 1.5.9 is vulnerable to malicious file uploads via the form for uploading images to garage doors. Rated hi
CVE-2020-12841 MEDIUM POC
6.5 Sep 24

ismartgate PRO 1.5.9 is vulnerable to CSRF that allows remote attackers to upload imae files via /index.php. Rated mediu
CVE-2020-12840 MEDIUM POC
6.5 Sep 24

ismartgate PRO 1.5.9 is vulnerable to CSRF that allows remote attackers to upload sound files via /index.php. Rated medi
CVE-2020-12281 MEDIUM POC
6.5 Sep 24

iSmartgate PRO 1.5.9 is vulnerable to CSRF that allows remote attackers to create a new user via /index.php. Rated mediu
CVE-2020-12280 MEDIUM POC
6.5 Sep 24

iSmartgate PRO 1.5.9 is vulnerable to CSRF that allows remote attackers to open/close a specified garage door/gate via /

Same weakness CWE-1021 – Improper Restriction of Rendered UI Layers or Frames

View all
CVE-2022-3167 HIGH POC
8.8
CVE-2021-3734 HIGH POC
8.8
CVE-2019-16371 HIGH POC
8.2
CVE-2024-33377 HIGH POC
8.1
CVE-2022-1803 MEDIUM POC
6.9
CVE-2024-2177 MEDIUM POC
6.8
CVE-2024-4950 MEDIUM POC
6.5
CVE-2023-38873 MEDIUM POC
6.5

Same technique XSS

View all
CVE-2017-9248 CRITICAL POC
9.8
CVE-2013-1710 CRITICAL POC
10.0
CVE-2013-7389 MEDIUM POC
4.3
CVE-2021-25299 MEDIUM POC
6.1
CVE-2014-2120 MEDIUM
6.1
CVE-2023-40000 HIGH POC
8.3
CVE-2024-52875 HIGH POC
8.8
CVE-2016-8581 MEDIUM POC
6.1

Share

CVE-2020-13119 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy