CVE-2020-9473

Name of the Vulnerable Software and Affected Versions S. Siedle & Soehne SG 150-0 Smart Gateway versions prior to 1.2.4

Description The issue allows an attacker with network access to gain root access on the gateway by exploiting a passwordless ftp ssh user through an exploit chain.

Recommendations For versions prior to 1.2.4, update to version 1.2.4 or later to resolve the issue. As a temporary workaround, consider restricting network access to the gateway until the update can be applied.