Raisecom records

11 published records for vendor raisecom.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 0
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')7
CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')3
CWE-434 Unrestricted Upload of File with Dangerous Type1

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

11 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
49Plan	CVE-2024-7120Proof of concept	Raisecom MSG1200/MSG2100E/MSG2200/MSG2300 Web Interface list_base_config.php os command injectionraisecom · msg2300 firmware · CWE-78 RCE Command injection	Medium5.3	—	93.4%	Jul 26, 2024
39Monitor	CVE-2024-55515No exploit	A vulnerability was found in Raisecom MSG1200, MSG2100E, MSG2200, and MSG2300 3.90.raisecom · msg2300 firmware · CWE-22 Pre-auth Path traversal	Critical9.8	—	0.6%	Dec 17, 2024
36Monitor	CVE-2024-55516No exploit	A vulnerability was found in Raisecom MSG1200, MSG2100E, MSG2200, and MSG2300 v3.90.raisecom · msg2300 firmware · CWE-22 Pre-auth Path traversal	Critical9.1	—	0.5%	Dec 17, 2024
36Monitor	CVE-2024-55513No exploit	A vulnerability was found in Raisecom MSG1200, MSG2100E, MSG2200, and MSG2300 3.90.raisecom · msg2300 firmware · CWE-22 Pre-auth Path traversal	Critical9.1	—	0.5%	Dec 17, 2024
35Monitor	CVE-2019-7385Proof of concept	An authenticated shell command injection issue has been discovered in Raisecom ISCOM HT803G-U, HT803G-W, HT803G-1GE, and HT803G GPON productraisecom · iscom ht803g-u firmware · CWE-78 RCE Command injection	High7.8	—	12.2%	Mar 21, 2019
32Monitor	CVE-2019-7384No exploit	An authenticated shell command injection issue has been discovered in Raisecom ISCOM HT803G-U, HT803G-W, HT803G-1GE, and HT803G GPON productraisecom · iscom ht803g-u firmware · CWE-78 RCE Command injection	High7.8	—	3.5%	Mar 21, 2019
28Monitor	CVE-2024-7468No exploit	Raisecom MSG1200/MSG2100E/MSG2200/MSG2300 Web Interface list_service_manage.php sslvpn_config_mod os command injectionraisecom · msg2300 firmware · CWE-78 RCE Command injection	Medium5.3	—	24.9%	Aug 4, 2024
28Monitor	CVE-2024-7469No exploit	Raisecom MSG1200/MSG2100E/MSG2200/MSG2300 Web Interface list_vpn_web_custom.php sslvpn_config_mod os command injectionraisecom · msg2300 firmware · CWE-78 RCE Command injection	Medium5.3	—	24.9%	Aug 5, 2024
28Monitor	CVE-2024-7470No exploit	Raisecom MSG1200/MSG2100E/MSG2200/MSG2300 Web Interface vpn_template_style.php sslvpn_config_mod os command injectionraisecom · msg2300 firmware · CWE-78 RCE Command injection	Medium5.3	—	24.9%	Aug 5, 2024
28Monitor	CVE-2024-7467No exploit	Raisecom MSG1200/MSG2100E/MSG2200/MSG2300 Web Interface list_ip_network.php sslvpn_config_mod os command injectionraisecom · msg2300 firmware · CWE-78 RCE Command injection	Medium5.3	—	23.4%	Aug 4, 2024
25Monitor	CVE-2024-55514No exploit	A vulnerability was found in Raisecom MSG1200, MSG2100E, MSG2200, and MSG2300 3.90.raisecom · msg2300 firmware · CWE-434 Pre-auth File upload	Medium6.3	—	0.2%	Dec 17, 2024

CVE-2024-7120
49Plan
Raisecom MSG1200/MSG2100E/MSG2200/MSG2300 Web Interface list_base_config.php os command injection
MediumCVSS 5.3Proof of conceptEPSS 93%
- RCE
- Command injection
raisecom · msg2300 firmwareJul 26, 2024
CVE-2024-55515
39Monitor
A vulnerability was found in Raisecom MSG1200, MSG2100E, MSG2200, and MSG2300 3.90.
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Path traversal
raisecom · msg2300 firmwareDec 17, 2024
CVE-2024-55516
36Monitor
A vulnerability was found in Raisecom MSG1200, MSG2100E, MSG2200, and MSG2300 v3.90.
CriticalCVSS 9.1No exploitEPSS 1%
- Pre-auth
- Path traversal
raisecom · msg2300 firmwareDec 17, 2024
CVE-2024-55513
36Monitor
A vulnerability was found in Raisecom MSG1200, MSG2100E, MSG2200, and MSG2300 3.90.
CriticalCVSS 9.1No exploitEPSS 1%
- Pre-auth
- Path traversal
raisecom · msg2300 firmwareDec 17, 2024
CVE-2019-7385
35Monitor
An authenticated shell command injection issue has been discovered in Raisecom ISCOM HT803G-U, HT803G-W, HT803G-1GE, and HT803G GPON product
HighCVSS 7.8Proof of conceptEPSS 12%
- RCE
- Command injection
raisecom · iscom ht803g-u firmwareMar 21, 2019
CVE-2019-7384
32Monitor
An authenticated shell command injection issue has been discovered in Raisecom ISCOM HT803G-U, HT803G-W, HT803G-1GE, and HT803G GPON product
HighCVSS 7.8No exploitEPSS 4%
- RCE
- Command injection
raisecom · iscom ht803g-u firmwareMar 21, 2019
CVE-2024-7468
28Monitor
Raisecom MSG1200/MSG2100E/MSG2200/MSG2300 Web Interface list_service_manage.php sslvpn_config_mod os command injection
MediumCVSS 5.3No exploitEPSS 25%
- RCE
- Command injection
raisecom · msg2300 firmwareAug 4, 2024
CVE-2024-7469
28Monitor
Raisecom MSG1200/MSG2100E/MSG2200/MSG2300 Web Interface list_vpn_web_custom.php sslvpn_config_mod os command injection
MediumCVSS 5.3No exploitEPSS 25%
- RCE
- Command injection
raisecom · msg2300 firmwareAug 5, 2024
CVE-2024-7470
28Monitor
Raisecom MSG1200/MSG2100E/MSG2200/MSG2300 Web Interface vpn_template_style.php sslvpn_config_mod os command injection
MediumCVSS 5.3No exploitEPSS 25%
- RCE
- Command injection
raisecom · msg2300 firmwareAug 5, 2024
CVE-2024-7467
28Monitor
Raisecom MSG1200/MSG2100E/MSG2200/MSG2300 Web Interface list_ip_network.php sslvpn_config_mod os command injection
MediumCVSS 5.3No exploitEPSS 23%
- RCE
- Command injection
raisecom · msg2300 firmwareAug 4, 2024
CVE-2024-55514
25Monitor
A vulnerability was found in Raisecom MSG1200, MSG2100E, MSG2200, and MSG2300 3.90.
MediumCVSS 6.3No exploitEPSS 0%
- Pre-auth
- File upload
raisecom · msg2300 firmwareDec 17, 2024