Vulners
Lucene search
CVE-2024-7120
🗓️ 26 Jul 2024 05:00:07Reported by VulDBType 
cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 93 Views🌐 WEB
| Reporter | Title | Published | Views | Family All 12 |
|---|---|---|---|---|
 | Exploit for OS Command Injection in Raisecom Msg2300_Firmware | 30 Aug 202415:50 | – | githubexploit |
| Exploit for OS Command Injection in Raisecom Msg2300_Firmware | 24 Apr 202513:33 | – | githubexploit |
| Exploit for OS Command Injection in Raisecom Msg2300_Firmware | 30 Aug 202415:50 | – | githubexploit |
 | CVE-2024-7120 | 26 Jul 202407:58 | – | circl |
 | Raisecom MSG1200、MSG2100E、MSG2200和MSG2300 操作系统命令注入漏洞 | 26 Jul 202400:00 | – | cnnvd |
 | CVE-2024-7120 Raisecom MSG1200/MSG2100E/MSG2200/MSG2300 Web Interface list_base_config.php os command injection | 26 Jul 202405:00 | – | cvelist |
 | Raisecom MSG1200, MSG2100E, MSG2200 and MSG2300 3.90 - Command Injection | 7 Jun 202603:02 | – | nuclei |
 | CVE-2024-7120 | 26 Jul 202405:15 | – | nvd |
 | PT-2024-5851 | 26 Jul 202400:00 | – | ptsecurity |
 | CVE-2024-7120 | 23 May 202507:18 | – | redhatcve |
10
Node
Node
Node
Node
[
{
"vendor": "Raisecom",
"product": "MSG1200",
"versions": [
{
"version": "3.90",
"status": "affected"
}
],
"modules": [
"Web Interface"
]
},
{
"vendor": "Raisecom",
"product": "MSG2100E",
"versions": [
{
"version": "3.90",
"status": "affected"
}
],
"modules": [
"Web Interface"
]
},
{
"vendor": "Raisecom",
"product": "MSG2200",
"versions": [
{
"version": "3.90",
"status": "affected"
}
],
"modules": [
"Web Interface"
]
},
{
"vendor": "Raisecom",
"product": "MSG2300",
"versions": [
{
"version": "3.90",
"status": "affected"
}
],
"modules": [
"Web Interface"
]
}
]| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| template | path | list_base_config.php | OS command injection via manipulation of the template argument in list_base_config.php (Web Interface) potentially enabling remote code execution. | CWE-78 |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
21 Nov 2024 09:50Current
6.9Medium risk
Vulners AI Score6.9
CVSS 3.16.3 - 9.8
CVSS 45.3
CVSS 26.5
CVSS 36.3
EPSS0.9226
SSVC