CVE-2020-14027: Ozeki NG Sms Gateway

Medium severity, CVSS 5.3. EPSS: 0.8% chance of exploitation in the next 30 days.

An issue was discovered in Ozeki NG SMS Gateway through 4.17.6. The database connection strings accept custom unsafe arguments, such as ENABLE_LOCAL_INFILE, that can be leveraged by attackers to enable MySQL Load Data Local (rogue MySQL server) attacks.

Affected products

• Ozeki Ozeki NG Sms Gateway: up to and including 4.17.6

Published 2020-09-22. Last modified 2026-06-17.