CVE-2025-1536: Raisecom Multi-Service Intelligent Gateway Request Parameter vpn_template_style.php os command injection
A vulnerability was found in Raisecom Multi-Service Intelligent Gateway up to 20250208. It has been declared as critical. This vulnerability affects unknown code of the file /vpn/vpntemplatestyle.php of the component Request Parameter Handler. The manipulation of the argument stylenum leads to os command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-1536?
CVE-2025-1536 is classified as a critical severity vulnerability.
What software is affected by CVE-2025-1536?
CVE-2025-1536 affects the Raisecom Multi-Service Intelligent Gateway up to version 20250208.
How do I fix CVE-2025-1536?
To fix CVE-2025-1536, update the Raisecom Multi-Service Intelligent Gateway to a version released after 20250208.
What type of vulnerability is CVE-2025-1536?
CVE-2025-1536 is a vulnerability in the Request Parameter Handler of the Raisecom Multi-Service Intelligent Gateway.
What component is affected in CVE-2025-1536?
The vulnerability CVE-2025-1536 affects the file /vpn/vpn_template_style.php.