CVE-2025-1536
CVSS 3.1 Score 7.3 of 10 (high)
Details
Summary
CVE-2025-1536 is a critical vulnerability affecting the Raisecom Multi-Service Intelligent Gateway up to version 20250208. This issue lies within the Request Parameter Handler component and specifically the file /vpn/vpn_template_style.php. The manipulation of the argument 'stylenum' enables attackers to inject os commands, posing a significant security risk. The exploit can be executed remotely and publicly disclosed information suggests it is already being used in attacks. Despite early notification, the vendor has not responded to address this vulnerability.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.