Raisecom vulnerabilities
We track 10 vulnerabilities in Raisecom products across 10 products. 10 are rated high or critical, and none are known to be exploited. The most recent was published on August 14, 2026.
Latest Raisecom vulnerabilities
- 7.3 High severity
Communication Command and Dispatch Management…: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was identified in Raisecom Communication Command and Dispatch Management Platform up to 7.6.5. This affects an unknown part of the file /app/users/getpwd.php. Such manipulation of the argument sip leads to sql injection. The attack can be execu
- 7.3 High severity
Multi-Service Intelligent Gateway: Improper Neutralization of Special Elements used in a Command
A vulnerability was found in Raisecom Multi-Service Intelligent Gateway up to 20250208. It has been declared as critical. This vulnerability affects unknown code of the file /vpn/vpn_template_style.php of the component Request Parameter Handler. The manipulati
- 9.1 Critical severity
Msg2300 Firmware: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability was found in Raisecom MSG1200, MSG2100E, MSG2200, and MSG2300 v3.90. The component affected by this issue is /upload_sysconfig.php on the web interface. By crafting a suitable form name, arbitrary files can be uploaded, potentially leading to u
- 9.8 Critical severity
Msg2300 Firmware: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability was found in Raisecom MSG1200, MSG2100E, MSG2200, and MSG2300 3.90. The component affected by this issue is /upload_ipslib.php on the web interface. By crafting a suitable form name, arbitrary files can be uploaded.
- 9.1 Critical severity
Msg2300 Firmware: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability was found in Raisecom MSG1200, MSG2100E, MSG2200, and MSG2300 3.90. The component affected by this issue is /upload_netaction.php on the web interface. By crafting a suitable form name, arbitrary files can be uploaded, potentially leading to un
- 9.8 Critical severity
MSG1200: Improper Neutralization of Special Elements used in an OS Command
A vulnerability was found in Raisecom MSG1200, MSG2100E, MSG2200 and MSG2300 3.90. It has been rated as critical. This issue affects the function sslvpn_config_mod of the file /vpn/vpn_template_style.php of the component Web Interface. The manipulation of the
- 9.8 Critical severity
MSG1200: Improper Neutralization of Special Elements used in an OS Command
A vulnerability was found in Raisecom MSG1200, MSG2100E, MSG2200 and MSG2300 3.90. It has been declared as critical. This vulnerability affects the function sslvpn_config_mod of the file /vpn/list_vpn_web_custom.php of the component Web Interface. The manipula
- 9.8 Critical severity
MSG1200: Improper Neutralization of Special Elements used in an OS Command
A vulnerability was found in Raisecom MSG1200, MSG2100E, MSG2200 and MSG2300 3.90. It has been classified as critical. This affects the function sslvpn_config_mod of the file /vpn/list_service_manage.php of the component Web Interface. The manipulation of the
- 9.8 Critical severity
MSG1200: Improper Neutralization of Special Elements used in an OS Command
A vulnerability was found in Raisecom MSG1200, MSG2100E, MSG2200 and MSG2300 3.90 and classified as critical. Affected by this issue is the function sslvpn_config_mod of the file /vpn/list_ip_network.php of the component Web Interface. The manipulation of the
- 9.8 Critical severity
MSG1200: Improper Neutralization of Special Elements used in an OS Command
A vulnerability, which was classified as critical, was found in Raisecom MSG1200, MSG2100E, MSG2200 and MSG2300 3.90. This affects an unknown part of the file list_base_config.php of the component Web Interface. The manipulation of the argument template leads