जमा करें #380167: Raisecom MSG1200, MSG2100E, MSG2200, MSG2300 SoftwareVersion=3.90 Command Injectionजानकारी

शीर्षकRaisecom MSG1200, MSG2100E, MSG2200, MSG2300 SoftwareVersion=3.90 Command Injection
विवरणA command injection vulnerability has been identified in the RAISECOM Gateway devices, affecting models MSG1200, MSG2100E, MSG2200, and MSG2300. This vulnerability allows remote attackers to execute arbitrary commands on the system via the web interface. The issue resides in the list_base_config.php script, specifically via the template parameter, affecting over 25,112 devices on the Internet.
स्रोत⚠️ https://netsecfish.notion.site/Command-Injection-Vulnerability-in-RAISECOM-Gateway-Devices-673bc7d2f8db499f9de7182d4706c707?pvs=4
उपयोगकर्ता netsecfish (UID 64568)
सबमिशन25/07/2024 02:53 PM (2 साल पहले)
संयम25/07/2024 08:53 PM (6 hours later)
स्थितिस्वीकृत
VulDB प्रविष्टि272451 [Raisecom MSG1200/MSG2100E/MSG2200/MSG2300 3.90 Web Interface list_base_config.php template अधिकार वृद्धि]
अंक17

Want to stay up to date on a daily basis?

Enable the mail alert feature now!