CVE-2020-12280

iSmartgate PRO 1.5.9 is vulnerable to CSRF that allows remote attackers to open/close a specified garage door/gate via /isg/opendoor.php.

• CWE-352

• https://ismartgate.com/secure-garage-door/Product, Vendor Advisory
• https://kth.diva-portal.org/smash/get/diva2:1464458/FULLTEXT01.pdfExploit, Third Party Advisory
• https://ismartgate.com/secure-garage-door/Product, Vendor Advisory
• https://kth.diva-portal.org/smash/get/diva2:1464458/FULLTEXT01.pdfExploit, Third Party Advisory

Published

Sep 24, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-12275GitLab 12.6 through 12.9 is vulnerable to a privilege escala…5.3
• CVE-2020-12276GitLab 9.5.9 through 12.9 is vulnerable to stored XSS in an …4.8
• CVE-2020-12277GitLab 10.8 through 12.9 has a vulnerability that allows som…5.3
• CVE-2020-12278An issue was discovered in libgit2 before 0.28.4 and 0.9x be…9.8
• CVE-2020-12279An issue was discovered in libgit2 before 0.28.4 and 0.9x be…9.8
• CVE-2020-1228<p>A denial of service vulnerability exists in Windows DNS w…7.5
• CVE-2020-12281iSmartgate PRO 1.5.9 is vulnerable to CSRF that allows remot…6.5
• CVE-2020-12282iSmartgate PRO 1.5.9 is vulnerable to CSRF via the busca par…8.8
• CVE-2020-12283Sourcegraph before 3.15.1 has a vulnerable authentication wo…6.1
• CVE-2020-12284cbs_jpeg_split_fragment in libavcodec/cbs_jpeg.c in FFmpeg 4…9.8
• CVE-2020-12286In Octopus Deploy before 2019.12.9 and 2020 before 2020.1.12…4.3
• CVE-2020-12287Incorrect permissions in the Intel(R) Distribution of OpenVI…7.8