CVE-2020-14031

An issue was discovered in Ozeki NG SMS Gateway through 4.17.6. The outbox functionality of the TXT File module can be used to delete all/most files in a folder. Because the product usually runs as NT AUTHORITY\SYSTEM, the only files that will not be deleted are those currently being run by the system and/or files that have special security attributes (e.g., Windows Defender files).

• http://www.ozeki.hu/index.php?owpn=231Vendor Advisory
• https://github.com/DrunkenShells/Disclosures/tree/master/CVE-2020-14031-Arbitary%20File%20Delete-Ozeki%20SMS%20GatewayExploit, Third Party Advisory
• http://www.ozeki.hu/index.php?owpn=231Vendor Advisory
• https://github.com/DrunkenShells/Disclosures/tree/master/CVE-2020-14031-Arbitary%20File%20Delete-Ozeki%20SMS%20GatewayExploit, Third Party Advisory

Published

Sep 22, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-14026CSV Injection (aka Excel Macro Injection or Formula Injectio…8.8
• CVE-2020-14027An issue was discovered in Ozeki NG SMS Gateway through 4.17…5.3
• CVE-2020-14028An issue was discovered in Ozeki NG SMS Gateway through 4.17…7.2
• CVE-2020-14029An issue was discovered in Ozeki NG SMS Gateway through 4.17…7.5
• CVE-2020-1403A remote code execution vulnerability exists in the way that…7.5
• CVE-2020-14030An issue was discovered in Ozeki NG SMS Gateway through 4.17…7.2
• CVE-2020-14032ASRock 4x4 BOX-R1000 before BIOS P1.40 allows privilege esca…9.8
• CVE-2020-14033An issue was discovered in janus-gateway (aka Janus WebRTC S…9.8
• CVE-2020-14034An issue was discovered in janus-gateway (aka Janus WebRTC S…9.8
• CVE-2020-14039In Go before 1.13.13 and 1.14.x before 1.14.5, Certificate.V…5.3
• CVE-2020-1404An elevation of privilege vulnerability exists when the Wind…7.8
• CVE-2020-14040The x/text package before 0.3.3 for Go has a vulnerability i…7.5