Critical severity · published Dec 17, 2024
CVE-2024-55516
A vulnerability was found in Raisecom MSG1200, MSG2100E, MSG2200, and MSG2300 v3.90
9.1
CVSS
0.5%
EPSS
No
On KEV
Description
A vulnerability was found in Raisecom MSG1200, MSG2100E, MSG2200, and MSG2300 v3.90. The component affected by this issue is /upload_sysconfig.php on the web interface. By crafting a suitable form name, arbitrary files can be uploaded, potentially leading to unauthorized access to server permissions.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 44% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MF
Msg1200 Firmware · Raisecom
3.90 · source: NVD
MF
Msg2100e Firmware · Raisecom
3.90 · source: NVD
MF
Msg2200 Firmware · Raisecom
3.90 · source: NVD
MF
Msg2300 Firmware · Raisecom
3.90 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-55516
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-55516
Third Party Advisory
https://gist.github.com/wscg928/cbe88078751abad2ada2334eb12a5060
More from Msg1200 Firmware
9.8
CVE-2024-55515
A vulnerability was found in Raisecom MSG1200, MSG2100E, MSG2200, and MSG2300 3.90
9.8
CVE-2024-7470
Raisecom MSG1200/MSG2100E/MSG2200/MSG2300 Web Interface vpn_template_style.php sslvpn_config_mod os command injection
9.8
CVE-2024-7469
Raisecom MSG1200/MSG2100E/MSG2200/MSG2300 Web Interface list_vpn_web_custom.php sslvpn_config_mod os command injection
9.8
CVE-2024-7468
Raisecom MSG1200/MSG2100E/MSG2200/MSG2300 Web Interface list_service_manage.php sslvpn_config_mod os command injection
9.8
CVE-2024-7467
Raisecom MSG1200/MSG2100E/MSG2200/MSG2300 Web Interface list_ip_network.php sslvpn_config_mod os command injection