CVE-2020-12838

CVE-2020-12838 is a critical privilege escalation vulnerability affecting ismartgate PRO firmware versions 1.5.9 and earlier. An attacker can append malicious PHP code to the /cron/mailAdmin.php file, gaining full control over the device. With a CVSS score of 9.8, this vulnerability is easily exploitable over the network with no user interaction, leading to complete compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation or public exploit code, the vulnerability has garnered significant community discussion, indicating potential interest from threat actors.