← Database

CVE-2024-55514

MEDIUM CVSS: 6.3 Published: 2024-12-17 Modified: 2026-06-17

Description

A vulnerability was found in Raisecom MSG1200, MSG2100E, MSG2200, and MSG2300 3.90. The component affected by this issue is /upload_sfmig.php on the web interface. By crafting a suitable form name, arbitrary files can be uploaded, potentially leading to unauthorized access to server permissions.

Affected Platforms

Raisecom Msg2100ERaisecom Msg1200 FirmwareRaisecom Msg2200Raisecom Msg2200 FirmwareRaisecom Msg2100E FirmwareRaisecom Msg1200Raisecom Msg2300Raisecom Msg2300 Firmware

Weakness Type

CWE-434

References