CVE-2024-7470

A vulnerability was found in Raisecom MSG1200, MSG2100E, MSG2200 and MSG2300 3.90. It has been rated as critical. This issue affects the function sslvpn_config_mod of the file /vpn/vpn_template_style.php of the component Web Interface. The manipulation of the argument template/stylenum leads to os command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-273563. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

• CWE-78

• https://github.com/h0e4a0r1t/h0e4a0r1t.github.io/blob/master/2024/sQrromK7x42JbLgY/Command%20Injection%20Vulnerability%20in%20RAISECOM%20Gateway%20Devices-vpn_template_style.php.pdfBroken Link, Exploit, Technical Description, Third Party Advisory
• https://vuldb.com/?ctiid.273563Permissions Required, Third Party Advisory, VDB Entry
• https://vuldb.com/?id.273563Permissions Required, Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.385350Third Party Advisory, VDB Entry

Published

Aug 5, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-7464A vulnerability, which was classified as critical, has been …9.8
• CVE-2024-7465A vulnerability, which was classified as critical, was found…9.8
• CVE-2024-7466A vulnerability has been found in PMWeb 7.2.00 and classifie…5.4
• CVE-2024-7467A vulnerability was found in Raisecom MSG1200, MSG2100E, MSG…9.8
• CVE-2024-7468A vulnerability was found in Raisecom MSG1200, MSG2100E, MSG…9.8
• CVE-2024-7469A vulnerability was found in Raisecom MSG1200, MSG2100E, MSG…9.8
• CVE-2024-7472lunary-ai/lunary v1.2.26 contains an email injection vulnera…6.5
• CVE-2024-7473An IDOR vulnerability exists in the 'Evaluations' function o…6.5
• CVE-2024-7474In version 1.3.2 of lunary-ai/lunary, an Insecure Direct Obj…8.1
• CVE-2024-7475An improper access control vulnerability in lunary-ai/lunary…9.1
• CVE-2024-7476A broken access control vulnerability exists in lunary-ai/lu…4.3
• CVE-2024-7477A SQL injection vulnerability was found which could allow a …6.7