CVE-2020-9475

7.0 highEPSS 0.3%

High (7.0) in siedle sg 150-0 firmware. EPSS 0.3% chance of exploitation in the next 30 days.

The S. Siedle & Soehne SG 150-0 Smart Gateway before 1.2.4 allows local privilege escalation via a race condition in logrotate. By using an exploit chain, an attacker with access to the network can get root access on the gateway.

Severity

CVSS 3.1

7.0 high

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 18% of CVEs (scores of 2026-10-31)
CWE: CWE-362
Published: 2020-05-07
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

siedle:sg_150-0_firmware

References

https://research.hisolutions.com/2020/04/open-the-gates-insecurity-of-cloudless-smart-door-systems/
https://research.hisolutions.com/2020/04/open-the-gates-insecurity-of-cloudless-smart-door-systems/

Check your stack JSON