CVE-2024-55514

A vulnerability was found in Raisecom MSG1200, MSG2100E, MSG2200, and MSG2300 3.90. The component affected by this issue is /upload_sfmig.php on the web interface. By crafting a suitable form name, arbitrary files can be uploaded, potentially leading to unauthorized access to server permissions.

• CWE-434

• https://gist.github.com/wscg928/cbe88078751abad2ada2334eb12a5060Third Party Advisory

Published

Dec 17, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-55506An IDOR vulnerability in CodeAstro's Complaint Management Sy…8.8
• CVE-2024-55507An issue in CodeAstro Complaint Management System v.1.0 allo…9.8
• CVE-2024-55509SQL injection vulnerability in CodeAstro Complaint Managemen…9.8
• CVE-2024-5551The WP STAGING Pro WordPress Backup Plugin plugin for WordPr…8.8
• CVE-2024-55511A null pointer dereference vulnerability in Macrium Reflect …7.8
• CVE-2024-55513A vulnerability was found in Raisecom MSG1200, MSG2100E, MSG…9.1
• CVE-2024-55515A vulnerability was found in Raisecom MSG1200, MSG2100E, MSG…9.8
• CVE-2024-55516A vulnerability was found in Raisecom MSG1200, MSG2100E, MSG…9.1
• CVE-2024-55517An issue was discovered in the Interllect Core Search in Pol…8.8
• CVE-2024-5552kubeflow/kubeflow is vulnerable to a Regular Expression Deni…7.5
• CVE-2024-55529Z-BlogPHP 1.7.3 is vulnerable to arbitrary code execution vi…9.8
• CVE-2024-5553The Premium Addons for Elementor plugin for WordPress is vul…5.4