CVE-2025-1536

Name of the Vulnerable Software and Affected Versions Raisecom Multi-Service Intelligent Gateway up to 20250208

Description A critical issue affects the Request Parameter Handler component, specifically the file /vpn/vpn template style.php. The manipulation of the stylenum argument leads to os command injection. This issue can be exploited remotely. The exploit has been publicly disclosed.

Recommendations For Raisecom Multi-Service Intelligent Gateway up to 20250208, as a temporary workaround, consider restricting access to the /vpn/vpn template style.php file and avoid using the stylenum argument in the Request Parameter Handler until a patch is available. At the moment, there is no information about a newer version that contains a fix for this issue.