CVE-2024-7120

Raisecom 기기 명령 주입 CVE-2024-7120 개념 증명! 개요 RAISECOM 게이트웨이 기기모델 MSG1200, MSG2100E, MSG2200, MSG2300에서 명령 주입 취약점이 확인되었습니다. 이 취약점으로 인해 원격 공격자가 웹 인터페이스를 통해 시스템에서 임의 명령을 실행할 수 있습니다. 문제는 listbaseconfig.php 스크립트, 특히 template 매개변수에 있으며, 인터넷 상의 25,112개 이상의 기기에 영향을 미칩니다. ✔ FOFA : title="web user login" &&...

CVE-2024-7120-Exploit-by-Dark-07x

Raisecom 장비 명령어 삽입 CVE-2024-7120 개념 증명! 개요 RAISECOM 게이트웨이 장비에서 명령어 삽입 취약점이 확인되었으며, MSG1200, MSG2100E, MSG2200 및 MSG2300 모델에 영향을 미칩니다. 이 취약점을 통해 원격 공격자는 웹 인터페이스를 통해 시스템에서 임의의 명령을 실행할 수 있습니다. 문제는 listbaseconfig.php 스크립트의 template 매개변수에 있으며, 인터넷상의 25,112개 이상의 장비에 영향을 미칩니다. ✔ FOFA : title="web user...

EUVD-2025-4521

Malicious code in bioql PyPI...

CVE-2025-1536

A vulnerability was found in Raisecom Multi-Service Intelligent Gateway up to 20250208. It has been declared as critical. This vulnerability affects unknown code of the file /vpn/vpntemplatestyle.php of the component Request Parameter Handler. The manipulation of the argument stylenum leads to os...

CVE-2025-1536

The CVE-2025-1536 entry concerns Raisecom Multi-Service Intelligent Gateway (up to 20250208). The issue is a remote OS command injection in the file /vpn/vpn_template_style.php within the Request Parameter Handler, triggered by manipulating the stylenum argument. Available sources indicate an exp...

CVE-2025-1536 Raisecom Multi-Service Intelligent Gateway Request Parameter vpn_template_style.php os command injection

A vulnerability was found in Raisecom Multi-Service Intelligent Gateway up to 20250208. It has been declared as critical. This vulnerability affects unknown code of the file /vpn/vpntemplatestyle.php of the component Request Parameter Handler. The manipulation of the argument stylenum leads to os...

CVE-2025-1536 Raisecom Multi-Service Intelligent Gateway Request Parameter vpn_template_style.php os command injection

A vulnerability was found in Raisecom Multi-Service Intelligent Gateway up to 20250208. It has been declared as critical. This vulnerability affects unknown code of the file /vpn/vpntemplatestyle.php of the component Request Parameter Handler. The manipulation of the argument stylenum leads to os...

Raisecom Multi-Service Intelligent Gateway 命令注入漏洞

Raisecom Multi-Service Intelligent Gateway is a Multi-Service Intelligent Gateway from Raisecom China. A command injection vulnerability exists in Raisecom Multi-Service Intelligent Gateway 20250208 and earlier versions, which stems from improper parameter handling, resulting in OS command...

Raisecom多款产品 安全漏洞

Raisecom MSG1200 and others are a Gigabit Converged Gateway from Raisecom China. A security vulnerability exists in various Raisecom products, which stems from the ability to upload arbitrary files, which may result in unauthorized access to server privileges. The following products are affected:...

Raisecom多款产品 安全漏洞

Raisecom MSG1200 and others are a Gigabit Converged Gateway from Raisecom China. A security vulnerability exists in various Raisecom products, which stems from the ability to upload arbitrary files, which may result in unauthorized access to server privileges. The following products are affected:...

Raisecom MSG1200、Raisecom MSG2100E、Raisecom MSG2200和Raisecom MSG2300 操作系统命令注入漏洞

The Raisecom MSG1200 and others are a Gigabit Converged Gateway from Raisecom China. An OS command injection vulnerability exists in the Raisecom MSG1200, Raisecom MSG2100E, Raisecom MSG2200, and Raisecom MSG2300 version 3.90, which originates from the parameter template/ in file...