← Database

CVE-2024-55515

CRITICAL CVSS: 9.8 Published: 2024-12-17 Modified: 2026-06-17

Description

A vulnerability was found in Raisecom MSG1200, MSG2100E, MSG2200, and MSG2300 3.90. The component affected by this issue is /upload_ipslib.php on the web interface. By crafting a suitable form name, arbitrary files can be uploaded.

Affected Platforms

Raisecom Msg2100ERaisecom Msg1200 FirmwareRaisecom Msg2200Raisecom Msg2200 FirmwareRaisecom Msg2100E FirmwareRaisecom Msg1200Raisecom Msg2300Raisecom Msg2300 Firmware

Weakness Type

CWE-22

References