Vulnerability Details CVE-2024-55514
A vulnerability was found in Raisecom MSG1200, MSG2100E, MSG2200, and MSG2300 3.90. The component affected by this issue is /upload_sfmig.php on the web interface. By crafting a suitable form name, arbitrary files can be uploaded, potentially leading to unauthorized access to server permissions.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 20.6%
CVSS Severity
CVSS v3 Score 6.3
Products affected by CVE-2024-55514
-
cpe:2.3:h:raisecom:msg1200:-
-
cpe:2.3:h:raisecom:msg2100e:-
-
cpe:2.3:h:raisecom:msg2200:-
-
cpe:2.3:h:raisecom:msg2300:-
-
cpe:2.3:o:raisecom:msg1200_firmware:3.90
-
cpe:2.3:o:raisecom:msg2100e_firmware:3.90
-
cpe:2.3:o:raisecom:msg2200_firmware:3.90
-
cpe:2.3:o:raisecom:msg2300_firmware:3.90