CVE-2024-7467

A vulnerability was found in Raisecom MSG1200, MSG2100E, MSG2200 and MSG2300 3.90 and classified as critical. Affected by this issue is the function sslvpn_config_mod of the file /vpn/list_ip_network.php of the component Web Interface. The manipulation of the argument template/stylenum leads to os command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-273560. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

• CWE-78
• CWE-78

• https://github.com/h0e4a0r1t/h0e4a0r1t.github.io/blob/master/2024/sQrromK7x42JbLgY/Command%20Injection%20Vulnerability%20in%20RAISECOM%20Gateway%20Devices-list_ip_network.php.pdfBroken Link, Exploit, Technical Description, Third Party Advisory
• https://vuldb.com/?ctiid.273560Permissions Required, VDB Entry
• https://vuldb.com/?id.273560VDB Entry
• https://vuldb.com/?submit.385347Third Party Advisory, VDB Entry

Published

Aug 5, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-7461A vulnerability was found in ForIP Tecnologia Administração …9.8
• CVE-2024-7462A vulnerability classified as critical has been found in TOT…9.8
• CVE-2024-7463A vulnerability classified as critical was found in TOTOLINK…9.8
• CVE-2024-7464A vulnerability, which was classified as critical, has been …9.8
• CVE-2024-7465A vulnerability, which was classified as critical, was found…9.8
• CVE-2024-7466A vulnerability has been found in PMWeb 7.2.00 and classifie…5.4
• CVE-2024-7468A vulnerability was found in Raisecom MSG1200, MSG2100E, MSG…9.8
• CVE-2024-7469A vulnerability was found in Raisecom MSG1200, MSG2100E, MSG…9.8
• CVE-2024-7470A vulnerability was found in Raisecom MSG1200, MSG2100E, MSG…9.8
• CVE-2024-7472lunary-ai/lunary v1.2.26 contains an email injection vulnera…6.5
• CVE-2024-7473An IDOR vulnerability exists in the 'Evaluations' function o…6.5
• CVE-2024-7474In version 1.3.2 of lunary-ai/lunary, an Insecure Direct Obj…8.1