CVE-2024-55514

A vulnerability was found in Raisecom MSG1200, MSG2100E, MSG2200, and MSG2300 3.90

Medium · published December 17, 2024

CVSS v3.1
6.3
EPSS
0%
Percentile
13.7
In the wild
Unconfirmed
What it is

A vulnerability was found in Raisecom MSG1200, MSG2100E, MSG2200, and MSG2300 3.90. The component affected by this issue is /upload_sfmig.php on the web interface. By crafting a suitable form name, arbitrary files can be uploaded, potentially leading to unauthorized access to server permissions.

The record
Technical detail
CVSS v3.1
6.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00236 · 13.7th percentile
Published
2024-12-17T00:00Z
EPSS history
Timeline
  • 17 DEC 00:00Z
    A vulnerability was found in Raisecom MSG1200, MSG2100E, MSG2200, and MSG2300 3.90
    cvelistv5