CVE-2020-14028

CVE-2020-14028 is a path traversal vulnerability affecting Ozeki NG SMS Gateway versions through 4.17.6. An authenticated attacker can exploit this flaw in the Autoreply module's Script Name to write or overwrite arbitrary files with arbitrary content, often with NT AUTHORITY\SYSTEM privileges. This high-severity vulnerability (CVSS 7.2) has a network attack vector and low attack complexity, leading to potential high impacts on confidentiality, integrity, and availability. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.