A vulnerability was found in Raisecom MSG1200, MSG2100E, MSG2200, and MSG2300 v3.90. The component affected by this issue is /upload_sysconfig.php on the web interface. By crafting a suitable form name, arbitrary files can be uploaded, potentially leading to unauthorized access to server permissions.
References
| Link | Resource |
|---|---|
| https://gist.github.com/wscg928/cbe88078751abad2ada2334eb12a5060 | Third Party Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
Configuration 2 (hide)
| AND |
|
Configuration 3 (hide)
| AND |
|
Configuration 4 (hide)
| AND |
|
History
28 Apr 2025, 17:13
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Raisecom msg1200 Firmware
Raisecom msg2300 Firmware Raisecom Raisecom msg2200 Firmware Raisecom msg2100e Firmware Raisecom msg2300 Raisecom msg2200 Raisecom msg1200 Raisecom msg2100e |
|
| References | () https://gist.github.com/wscg928/cbe88078751abad2ada2334eb12a5060 - Third Party Advisory | |
| CPE | cpe:2.3:h:raisecom:msg2200:-:*:*:*:*:*:*:* cpe:2.3:o:raisecom:msg1200_firmware:3.90:*:*:*:*:*:*:* cpe:2.3:h:raisecom:msg1200:-:*:*:*:*:*:*:* cpe:2.3:h:raisecom:msg2100e:-:*:*:*:*:*:*:* cpe:2.3:o:raisecom:msg2300_firmware:3.90:*:*:*:*:*:*:* cpe:2.3:o:raisecom:msg2200_firmware:3.90:*:*:*:*:*:*:* cpe:2.3:h:raisecom:msg2300:-:*:*:*:*:*:*:* cpe:2.3:o:raisecom:msg2100e_firmware:3.90:*:*:*:*:*:*:* |
18 Dec 2024, 16:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-12-17 20:15
Updated : 2025-04-28 17:13
NVD link : CVE-2024-55516
Mitre link : CVE-2024-55516
CVE.ORG link : CVE-2024-55516
JSON object : View
Products Affected
raisecom
- msg2300
- msg1200
- msg2300_firmware
- msg2100e_firmware
- msg2200
- msg2200_firmware
- msg2100e
- msg1200_firmware
CWE
CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')