CVE-2024-55516

Summary

CVE-2024-55516 is a newly discovered vulnerability affecting Raisecom MSG1200, MSG2100E, MSG2200, and MSG2300 v3.90 devices. The weakness lies within the /upload_sysconfig.php file on the web interface. An attacker can exploit this flaw by crafting a specific form name during file uploads, enabling unauthorized uploads of arbitrary files. This vulnerability poses a significant risk, potentially granting an attacker access to unintended server permissions.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.