Vulnerability · Published Nov 12, 2025 · Assigned by VulnCheck

CVE-2023-7327Ozeki SMS Gateway <= 10.3.208 Unauthenticated Arbitrary File Read

High 8.7

In plain English

A high-severity path traversal in Ozeki SMS Gateway from Ozeki Ltd.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 2.2% (higher than 83% of all known vulnerabilities). Ready-made attack tooling exists: Nuclei.

Severity (CVSS 4.0)8.7High

Exploit odds (30 days)2.2%top 17.1% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack tooling1Nuclei

Official description

Ozeki SMS Gateway versions up to and including 10.3.208 contain a path traversal vulnerability. Successful exploitation allows an unauthenticated attacker to use URL-encoded traversal sequences to read arbitrary files from the underlying filesystem with the privileges of the gateway service, leading to disclosure of sensitive information.

Affected products (as reported)

Vendor	Product	Versions
Ozeki Ltd.	Ozeki SMS Gateway	0 – through 10.3.208

Weakness: CWE-22 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

References

https://www.exploit-db.com/exploits/51646 exploit
https://ozeki-sms-gateway.com/ product
https://www.vulncheck.com/advisories/ozeki-sms-gateway-unauthenticated-arbitrary-file-read third-party-advisory