Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2024-7120

Raisecom MSG1200/MSG2100E/MSG2200/MSG2300 Web Interface list_base_config.php os command injection

Description

A vulnerability, which was classified as critical, was found in Raisecom MSG1200, MSG2100E, MSG2200 and MSG2300 3.90. This affects an unknown part of the file list_base_config.php of the component Web Interface. The manipulation of the argument template leads to os command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-272451.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Raisecom MSG1200

  • 3.90affected

Raisecom MSG2100E

  • 3.90affected

Raisecom MSG2200

  • 3.90affected

Raisecom MSG2300

  • 3.90affected

References