CVE-2024-55516

A vulnerability was found in Raisecom MSG1200, MSG2100E, MSG2200, and MSG2300 v3.90. The component affected by this issue is /uploadsysconfig.php on the web interface. By crafting a suitable form name, arbitrary files can be uploaded, potentially leading to unauthorized access to server permissio...

CVE-2024-55516

The Raisecom MSG1200 , MSG2100E , MSG2200 , and MSG2300 (version v3.90 ) are affected by a vulnerability in the /upload_sysconfig.php component of the web interface. The root cause is an improper limitation of a pathname to a restricted directory , which allows an attacker to upload arbitrary fil...

CVE-2024-55515

A vulnerability exists in the web interface of Raisecom MSG1200 , MSG2100E , MSG2200 , and MSG2300 (all version 3.90 ). The flaw is located in the /upload_ipslib.php component, where an attacker can upload arbitrary files by crafting a suitable form name. This issue is associated with CWE-22 (Imp...

CVE-2024-55514: Unrestricted Upload of File with Dangerous Type

A vulnerability was found in Raisecom MSG1200, MSG2100E, MSG2200, and MSG2300 3.90. The component affected by this issue is /uploadsfmig.php on the web interface. By crafting a suitable form name, arbitrary files can be uploaded, potentially leading to unauthorized access to server permissions...

PT-2024-36538 · Raisecom · Raisecom Msg2200 +3

Name of the Vulnerable Software and Affected Versions: Raisecom MSG1200 version 3.90 Raisecom MSG2100E version 3.90 Raisecom MSG2200 version 3.90 Raisecom MSG2300 version 3.90 Description: A vulnerability was found in the web interface of Raisecom devices, specifically in the /upload sfmig.php...

CVE-2024-55514

A vulnerability was found in Raisecom MSG1200, MSG2100E, MSG2200, and MSG2300 3.90. The component affected by this issue is /uploadsfmig.php on the web interface. By crafting a suitable form name, arbitrary files can be uploaded, potentially leading to unauthorized access to server permissions...

CVE-2024-55514

A vulnerability was found in Raisecom MSG1200, MSG2100E, MSG2200, and MSG2300 3.90. The component affected by this issue is /uploadsfmig.php on the web interface. By crafting a suitable form name, arbitrary files can be uploaded, potentially leading to unauthorized access to server permissions...

CVE-2024-55516

A vulnerability was found in Raisecom MSG1200, MSG2100E, MSG2200, and MSG2300 v3.90. The component affected by this issue is /uploadsysconfig.php on the web interface. By crafting a suitable form name, arbitrary files can be uploaded, potentially leading to unauthorized access to server permissio...

PT-2024-36540

Name of the Vulnerable Software and Affected Versions Raisecom MSG1200 version 3.90 Raisecom MSG2100E version 3.90 Raisecom MSG2200 version 3.90 Raisecom MSG2300 version 3.90 Description A vulnerability was found in the Raisecom MSG series routers, affecting the /upload sysconfig.php component on...

PT-2024-36539 · Raisecom · Raisecom Msg2200 +3

Name of the Vulnerable Software and Affected Versions: Raisecom MSG1200 version 3.90 Raisecom MSG2100E version 3.90 Raisecom MSG2200 version 3.90 Raisecom MSG2300 version 3.90 Description: A problem exists in the web interface of the affected devices, specifically in the /upload ipslib.php...

CVE-2024-55513

A vulnerability exists in Raisecom MSG1200, MSG2100E, MSG2200, and MSG2300 running firmware version 3.90 . The issue is located in the /upload_netaction.php endpoint of the web interface, where an improper limitation of a pathname to a restricted directory allows an attacker to upload arbitrary f...

CVE-2024-55514

A vulnerability exists in the web interface of Raisecom MSG1200, MSG2100E, MSG2200, and MSG2300 (version 3.90 ) devices. The flaw is located in the /upload_sfmig.php component, where an attacker can upload arbitrary files by crafting a suitable form name. This could lead to unauthorized access to...

Cisco Secure Firewall Management Center SQL Injection

The vulnerability of the Web interface for managing Cisco Secure Firewall Management Center software formerly known as Cisco Firepower Management Center is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute...

TP-Link Archer C50 Code Execution

The vulnerability in the web interface of TP-Link Archer C50 Wi-Fi routers involves loading code without checking its integrity. Exploiting this vulnerability allows an attacker to execute arbitrary code and cause service failures...

TP-Link Archer C50 Unauthenticated Access

The vulnerability of the web-based management interface for TP-Link Archer C50 wireless routers involves the unencrypted storage of critical information. Exploiting this vulnerability can allow an attacker to gain unauthorized access to the credentials of the target Wi-Fi system...

PT-2025-2017 · Dahua · Dahua Ipc-Hfw2300R-Z +2

Name of the Vulnerable Software and Affected Versions: Dahua IPC-HFW1200S versions up to 20241222 Dahua IPC-HFW2300R-Z versions up to 20241222 Dahua IPC-HFW5220E-Z versions up to 20241222 Dahua IPC-HDW1200S versions up to 20241222 Description: A problematic vulnerability has been found in the Web...

CVE-2024-10511

CWE-287: Improper Authentication vulnerability exists that could cause Denial of access to the web interface when someone on the local network repeatedly requests the /accessdenied URL...

CVE-2024-10511

The provided connected documents identify CVE-2024-10511 as an Improper Authentication (CWE-287) vulnerability in Schneider Electric PowerChute Serial Shutdown. The issue can cause Denial of Access to the PCSS web UI when a local-network attacker repeatedly requests the /accessdenied endpoint. Af...

CVE-2024-10511

CWE-287: Improper Authentication vulnerability exists that could cause Denial of access to the web interface when someone on the local network repeatedly requests the /accessdenied URL...

SOLDR Threat Detection XSS

The vulnerability of the SOLDR threat detection and analysis web interface exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS by injecting malicious JavaScript code...