CVE-2024-7120

Raisecom 기기 명령 주입 CVE-2024-7120 개념 증명! 개요 RAISECOM 게이트웨이 기기모델 MSG1200, MSG2100E, MSG2200, MSG2300에서 명령 주입 취약점이 확인되었습니다. 이 취약점으로 인해 원격 공격자가 웹 인터페이스를 통해 시스템에서 임의 명령을 실행할 수 있습니다. 문제는 listbaseconfig.php 스크립트, 특히 template 매개변수에 있으며, 인터넷 상의 25,112개 이상의 기기에 영향을 미칩니다. ✔ FOFA : title="web user login" &&...

CVE-2024-7120-Exploit-by-Dark-07x

Raisecom デバイス コマンドインジェクション CVE-2024-7120 概念実証! 概要 RAISECOM ゲートウェイデバイスにおいて、コマンドインジェクションの脆弱性が確認されました。影響を受けるモデルは、MSG1200、MSG2100E、MSG2200、MSG2300 です。この脆弱性により、リモートの攻撃者が Web インターフェースを介してシステム上で任意のコマンドを実行できる可能性があります。問題は listbaseconfig.php スクリプトに存在し、特に template パラメータを介して発生します。インターネット上の 25,112...

EUVD-2025-4521

Malicious code in bioql PyPI...

CVE-2025-1536

A vulnerability was found in Raisecom Multi-Service Intelligent Gateway up to 20250208. It has been declared as critical. This vulnerability affects unknown code of the file /vpn/vpntemplatestyle.php of the component Request Parameter Handler. The manipulation of the argument stylenum leads to os...

CVE-2025-1536 Raisecom Multi-Service Intelligent Gateway Request Parameter vpn_template_style.php os command injection

A vulnerability was found in Raisecom Multi-Service Intelligent Gateway up to 20250208. It has been declared as critical. This vulnerability affects unknown code of the file /vpn/vpntemplatestyle.php of the component Request Parameter Handler. The manipulation of the argument stylenum leads to os...

CVE-2025-1536 Raisecom Multi-Service Intelligent Gateway Request Parameter vpn_template_style.php os command injection

A vulnerability was found in Raisecom Multi-Service Intelligent Gateway up to 20250208. It has been declared as critical. This vulnerability affects unknown code of the file /vpn/vpntemplatestyle.php of the component Request Parameter Handler. The manipulation of the argument stylenum leads to os...

CVE-2025-1536

The CVE-2025-1536 entry concerns Raisecom Multi-Service Intelligent Gateway (up to 20250208). The issue is a remote OS command injection in the file /vpn/vpn_template_style.php within the Request Parameter Handler, triggered by manipulating the stylenum argument. Available sources indicate an exp...

Raisecom Multi-Service Intelligent Gateway 命令注入漏洞

Raisecom Multi-Service Intelligent Gateway is a Multi-Service Intelligent Gateway from Raisecom China. A command injection vulnerability exists in Raisecom Multi-Service Intelligent Gateway 20250208 and earlier versions, which stems from improper parameter handling, resulting in OS command...

Raisecom多款产品 安全漏洞

Raisecom MSG1200 and others are a Gigabit Converged Gateway from Raisecom China. A security vulnerability exists in various Raisecom products, which stems from the ability to upload arbitrary files, which may result in unauthorized access to server privileges. The following products are affected:...

Raisecom多款产品 安全漏洞

Raisecom MSG1200 and others are a Gigabit Converged Gateway from Raisecom China. A security vulnerability exists in various Raisecom products, which stems from the ability to upload arbitrary files, which may result in unauthorized access to server privileges. The following products are affected:...

Raisecom MSG1200、Raisecom MSG2100E、Raisecom MSG2200和Raisecom MSG2300 操作系统命令注入漏洞

The Raisecom MSG1200 and others are a Gigabit Converged Gateway from Raisecom China. An OS command injection vulnerability exists in the Raisecom MSG1200, Raisecom MSG2100E, Raisecom MSG2200, and Raisecom MSG2300 version 3.90, which originates from the parameter template/ in file...