<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: msg2100e firmware</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2024-55516: A vulnerability was found in Raisecom MSG1200, MSG2100E, MSG2200, and MSG2300 v3.90</title><link>https://patchthecve.com/cve/CVE-2024-55516.html</link><guid>https://patchthecve.com/cve/CVE-2024-55516.html</guid><pubDate>Wed, 17 Jun 2026 08:11:11 +0000</pubDate><description>CRITICAL 9.1: A vulnerability was found in Raisecom MSG1200, MSG2100E, MSG2200, and MSG2300 v3.90. The component affected by this issue is /upload_sysconfig.php on the web interface. By crafting a suitable form name, arbitrary files can be uploaded, potentially leading to unauthorized access to server permissions</description></item><item><title>CVE-2024-55515: A vulnerability was found in Raisecom MSG1200, MSG2100E, MSG2200, and MSG2300 3.90</title><link>https://patchthecve.com/cve/CVE-2024-55515.html</link><guid>https://patchthecve.com/cve/CVE-2024-55515.html</guid><pubDate>Wed, 17 Jun 2026 08:11:11 +0000</pubDate><description>CRITICAL 9.8: A vulnerability was found in Raisecom MSG1200, MSG2100E, MSG2200, and MSG2300 3.90. The component affected by this issue is /upload_ipslib.php on the web interface. By crafting a suitable form name, arbitrary files can be uploaded.</description></item><item><title>CVE-2024-55514: A vulnerability was found in Raisecom MSG1200, MSG2100E, MSG2200, and MSG2300 3.90</title><link>https://patchthecve.com/cve/CVE-2024-55514.html</link><guid>https://patchthecve.com/cve/CVE-2024-55514.html</guid><pubDate>Wed, 17 Jun 2026 08:11:11 +0000</pubDate><description>MEDIUM 6.3: A vulnerability was found in Raisecom MSG1200, MSG2100E, MSG2200, and MSG2300 3.90. The component affected by this issue is /upload_sfmig.php on the web interface. By crafting a suitable form name, arbitrary files can be uploaded, potentially leading to unauthorized access to server permissions.</description></item><item><title>CVE-2024-55513: A vulnerability was found in Raisecom MSG1200, MSG2100E, MSG2200, and MSG2300 3.90</title><link>https://patchthecve.com/cve/CVE-2024-55513.html</link><guid>https://patchthecve.com/cve/CVE-2024-55513.html</guid><pubDate>Wed, 17 Jun 2026 08:11:11 +0000</pubDate><description>CRITICAL 9.1: A vulnerability was found in Raisecom MSG1200, MSG2100E, MSG2200, and MSG2300 3.90. The component affected by this issue is /upload_netaction.php on the web interface. By crafting a suitable form name, arbitrary files can be uploaded, potentially leading to unauthorized access to server permissions.</description></item><item><title>CVE-2024-7470: A vulnerability was found in Raisecom MSG1200, MSG2100E, MSG2200 and MSG2300 3.90</title><link>https://patchthecve.com/cve/CVE-2024-7470.html</link><guid>https://patchthecve.com/cve/CVE-2024-7470.html</guid><pubDate>Wed, 17 Jun 2026 08:20:16 +0000</pubDate><description>MEDIUM 6.3: A vulnerability was found in Raisecom MSG1200, MSG2100E, MSG2200 and MSG2300 3.90. It has been rated as critical. This issue affects the function sslvpn_config_mod of the file /vpn/vpn_template_style.php of the component Web Interface. The manipulation of the argument template/stylenum leads to os c</description></item><item><title>CVE-2024-7469: A vulnerability was found in Raisecom MSG1200, MSG2100E, MSG2200 and MSG2300 3.90</title><link>https://patchthecve.com/cve/CVE-2024-7469.html</link><guid>https://patchthecve.com/cve/CVE-2024-7469.html</guid><pubDate>Wed, 17 Jun 2026 08:20:16 +0000</pubDate><description>MEDIUM 6.3: A vulnerability was found in Raisecom MSG1200, MSG2100E, MSG2200 and MSG2300 3.90. It has been declared as critical. This vulnerability affects the function sslvpn_config_mod of the file /vpn/list_vpn_web_custom.php of the component Web Interface. The manipulation of the argument template/stylenum l</description></item><item><title>CVE-2024-7468: A vulnerability was found in Raisecom MSG1200, MSG2100E, MSG2200 and MSG2300 3.90</title><link>https://patchthecve.com/cve/CVE-2024-7468.html</link><guid>https://patchthecve.com/cve/CVE-2024-7468.html</guid><pubDate>Wed, 17 Jun 2026 08:20:16 +0000</pubDate><description>MEDIUM 6.3: A vulnerability was found in Raisecom MSG1200, MSG2100E, MSG2200 and MSG2300 3.90. It has been classified as critical. This affects the function sslvpn_config_mod of the file /vpn/list_service_manage.php of the component Web Interface. The manipulation of the argument template/stylenum leads to os c</description></item><item><title>CVE-2024-7467: A vulnerability was found in Raisecom MSG1200, MSG2100E, MSG2200 and MSG2300 3.90 and classified as critical</title><link>https://patchthecve.com/cve/CVE-2024-7467.html</link><guid>https://patchthecve.com/cve/CVE-2024-7467.html</guid><pubDate>Wed, 17 Jun 2026 08:20:16 +0000</pubDate><description>MEDIUM 6.3: A vulnerability was found in Raisecom MSG1200, MSG2100E, MSG2200 and MSG2300 3.90 and classified as critical. Affected by this issue is the function sslvpn_config_mod of the file /vpn/list_ip_network.php of the component Web Interface. The manipulation of the argument template/stylenum leads to os c</description></item><item><title>CVE-2024-7120: A vulnerability, which was classified as critical, was found in Raisecom MSG1200, MSG2100E, MSG2200 and MSG230</title><link>https://patchthecve.com/cve/CVE-2024-7120.html</link><guid>https://patchthecve.com/cve/CVE-2024-7120.html</guid><pubDate>Wed, 17 Jun 2026 08:19:24 +0000</pubDate><description>MEDIUM 6.3: A vulnerability, which was classified as critical, was found in Raisecom MSG1200, MSG2100E, MSG2200 and MSG2300 3.90. This affects an unknown part of the file list_base_config.php of the component Web Interface. The manipulation of the argument template leads to os command injection. It is possible </description></item></channel></rss>