File Upload Vulnerability in Raisecom MSG Series Products
CVE-2024-55514

Currently unrated

Key Information:

Vendor
Raisecom
Status
Msg2300 Firmware
Vendor
CVE Published:
17 December 2024

Summary

CVE-2024-55514 identifies a critical file upload vulnerability in the Raisecom MSG1200, MSG2100E, MSG2200, and MSG2300 products, specifically in version 3.90. The flaw exists in the /upload_sfmig.php component of the web interface, where insufficient validation allows an attacker to craft a specific form name that enables the upload of arbitrary files. This vulnerability could lead to unauthorized access, which could compromise server permissions and put sensitive information at risk. Organizations using these devices are strongly advised to apply any available patches or mitigations immediately to secure their networks.

References

https://gist.github.com/wscg928/cbe88078751abad2ada2334eb...

Timeline

  • Vulnerability published

.
CVE-2024-55514 : File Upload Vulnerability in Raisecom MSG Series Products | SecurityVulnerability.io