CVE-2024-7120 Scanner
CVE-2024-7120 scanner - Command Injection vulnerability in Raisecom MSG1200, MSG2100E, MSG2200, MSG2300
Used 2.8k times · 3.4k assets checked · domain, ipv4, subdomain
CVE
CVE-2024-7120
5.3
CVSSmedium
Exploitable remotely over the internet · low-privilege account sufficient.
Description
A vulnerability, which was classified as critical, was found in Raisecom MSG1200, MSG2100E, MSG2200 and MSG2300 3.90. This affects an unknown part of the file list_base_config.php of the component Web Interface. The manipulation of the argument template leads to os command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-272451.
Attack Vector
Network
Privileges Req.
Low
User Interaction
None
msg1200msg2100emsg2200msg2300msg2300_firmware
Updated Oct 12, 2026View on NVD →
S4E scanner
CVE history: msg1200
Predict next CVE date with AIMonitor this CVE on your assets
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →