Exploit for OS Command Injection in Factorfx Open Computer Software Inventory Next Generation

CVE-2020-14947

githubexploit · 2020-07-02

Description

Remote Command Execution in OCS Inventory NG v2.7

Affected Factorfx Open Computer Software Inventory Next Generation versions

Factorfx Open Computer Software Inventory Next Generation= 2.7

All known vulnerabilities by product

Ocs Inventory Ng

CVSS 8.8 for CVE-2020-14947

8.8

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:LOW

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

Working code

100%confidence this exploit runs

Based on 2 file(s) in the source

EPSS Score

19.5%higher than 97.0% of all CVEs

Updated 2026-06-16

Exploit Details

Modified:2022-09-17 19:26

Last Seen:2025-08-31 20:43

Reporter:mhaskar

Written in:Python

Last commit:2020-07-02

Other exploits for CVE-2020-14947

CVE-2020-14947

2026-08-26 KitPloitKITPLOIT

OCS Inventory NG 2.7 Remote Code Execution

2020-07-03 AskarPACKETSTORMPython

OCS Inventory NG 2.7 - Remote Code Execution Exploit

2020-07-02 AskarZDTPython

OCS Inventory NG 2.7 - Remote Code Execution

2020-07-02 AskarEXPLOITDBPython

Exploit Code

README5 lines

## https://sploitus.com/exploit?id=AAFB63E9-C43C-54D3-AA4F-6ABCD7A51553
# CVE-2020-14947
The official exploit for OCS Inventory NG v2.7 Remote Command Execution CVE-2020-14947

![exploit image](OCSNG-RCE.png)

Exploit Code

Share

Share on social media: