CVE-2020-12843

9.8 criticalEPSS 1.3%

Critical (9.8) in gogogate ismartgate pro firmware. EPSS 1.3% chance of exploitation in the next 30 days.

ismartgate PRO 1.5.9 is vulnerable to malicious file uploads via the form for uploading sounds to garage doors. The magic bytes for WAV must be used.

Severity

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.3% chance of exploitation in the next 30 days; higher than 70% of CVEs (scores of 2026-10-31)
CWE: CWE-434
Published: 2020-09-24
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19