Vulnerability Details CVE-2024-55516
A vulnerability was found in Raisecom MSG1200, MSG2100E, MSG2200, and MSG2300 v3.90. The component affected by this issue is /upload_sysconfig.php on the web interface. By crafting a suitable form name, arbitrary files can be uploaded, potentially leading to unauthorized access to server permissions.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 38.9%
CVSS Severity
CVSS v3 Score 9.1
Products affected by CVE-2024-55516
-
cpe:2.3:h:raisecom:msg1200:-
-
cpe:2.3:h:raisecom:msg2100e:-
-
cpe:2.3:h:raisecom:msg2200:-
-
cpe:2.3:h:raisecom:msg2300:-
-
cpe:2.3:o:raisecom:msg1200_firmware:3.90
-
cpe:2.3:o:raisecom:msg2100e_firmware:3.90
-
cpe:2.3:o:raisecom:msg2200_firmware:3.90
-
cpe:2.3:o:raisecom:msg2300_firmware:3.90