Msg2300 Firmware vulnerabilities
8 known vulnerabilities in Msg2300 Firmware from Raisecom. 8 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 9.1 Critical severity
Msg2300 Firmware: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability was found in Raisecom MSG1200, MSG2100E, MSG2200, and MSG2300 v3.90. The component affected by this issue is /upload_sysconfig.php on the web interface. By crafting a suitable form name, arbitrary files can be uploaded, potentially leading to u
- 9.8 Critical severity
Msg2300 Firmware: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability was found in Raisecom MSG1200, MSG2100E, MSG2200, and MSG2300 3.90. The component affected by this issue is /upload_ipslib.php on the web interface. By crafting a suitable form name, arbitrary files can be uploaded.
- 9.1 Critical severity
Msg2300 Firmware: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability was found in Raisecom MSG1200, MSG2100E, MSG2200, and MSG2300 3.90. The component affected by this issue is /upload_netaction.php on the web interface. By crafting a suitable form name, arbitrary files can be uploaded, potentially leading to un
- 9.8 Critical severity
MSG1200: Improper Neutralization of Special Elements used in an OS Command
A vulnerability was found in Raisecom MSG1200, MSG2100E, MSG2200 and MSG2300 3.90. It has been rated as critical. This issue affects the function sslvpn_config_mod of the file /vpn/vpn_template_style.php of the component Web Interface. The manipulation of the
- 9.8 Critical severity
MSG1200: Improper Neutralization of Special Elements used in an OS Command
A vulnerability was found in Raisecom MSG1200, MSG2100E, MSG2200 and MSG2300 3.90. It has been declared as critical. This vulnerability affects the function sslvpn_config_mod of the file /vpn/list_vpn_web_custom.php of the component Web Interface. The manipula
- 9.8 Critical severity
MSG1200: Improper Neutralization of Special Elements used in an OS Command
A vulnerability was found in Raisecom MSG1200, MSG2100E, MSG2200 and MSG2300 3.90. It has been classified as critical. This affects the function sslvpn_config_mod of the file /vpn/list_service_manage.php of the component Web Interface. The manipulation of the
- 9.8 Critical severity
MSG1200: Improper Neutralization of Special Elements used in an OS Command
A vulnerability was found in Raisecom MSG1200, MSG2100E, MSG2200 and MSG2300 3.90 and classified as critical. Affected by this issue is the function sslvpn_config_mod of the file /vpn/list_ip_network.php of the component Web Interface. The manipulation of the
- 9.8 Critical severity
MSG1200: Improper Neutralization of Special Elements used in an OS Command
A vulnerability, which was classified as critical, was found in Raisecom MSG1200, MSG2100E, MSG2200 and MSG2300 3.90. This affects an unknown part of the file list_base_config.php of the component Web Interface. The manipulation of the argument template leads