CVE-2024-55516

CriticalCVSS 9.1/10Last modified Jun 17, 2026

Description

A vulnerability was found in Raisecom MSG1200, MSG2100E, MSG2200, and MSG2300 v3.90. The component affected by this issue is /upload_sysconfig.php on the web interface. By crafting a suitable form name, arbitrary files can be uploaded, potentially leading to unauthorized access to server permissions.

Metrics

CVSS 3.1 9.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Weakness enumeration

CWE-22

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://gist.github.com/wscg928/cbe88078751abad2ada2334eb12a5060Third Party Advisory

Timeline

Published: Dec 17, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-555178.8An issue was discovered in the Interllect Core Search in Polaris FT Intellect Core Banking 9.5. Input passed through the groupType parameter CVE-2024-55527.5kubeflow/kubeflow is vulnerable to a Regular Expression Denial of Service (ReDoS) attack due to inefficient regular expression complexity in CVE-2024-555299.8Z-BlogPHP 1.7.3 is vulnerable to arbitrary code execution via \zb_users\theme\shell\template.CVE-2024-55535.4The Premium Addons for Elementor plugin for WordPress is vulnerable to DOM-Based Stored Cross-Site Scripting via several parameters in all v CVE-2024-555329.8Improper Neutralization of Formula Elements in Export CSV feature of Apache Ranger in Apache Ranger Version < 2.6.0. Users are recommended t CVE-2024-555384.0Sensitive information disclosure due to missing authentication. The following products are affected: Acronis True Image (macOS) before build CVE-2024-555392.5Weak algorithm used to sign RPM package. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux) before build 39185, CVE-2024-55546.4The Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) plugin for WordPress is vulnerab CVE-2024-555407.8Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect 16 (Windows) befor CVE-2024-555416.1Stored cross-site scripting (XSS) vulnerability due to missing origin validation in postMessage. The following products are affected: Acroni CVE-2024-555424.4Local privilege escalation due to excessive permissions assigned to Tray Monitor service. The following products are affected: Acronis Cyber CVE-2024-555437.8Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect 16 (Windows) befor