CVE-2024-7120 — AI Deep Analysis Summary

🚨 **Essence**: OS Command Injection via `template` parameter in `list_base_config.php`. 💥 **Consequences**: Attackers can execute arbitrary system commands, compromising the entire gateway device.

🛡️ **Root Cause**: CWE-78 (OS Command Injection). 🐛 **Flaw**: Improper handling of the `template` argument allows malicious input to bypass validation and inject shell commands.

🏢 **Vendor**: Raisecom (瑞斯达康). 📦 **Affected Products**: MSG1200, MSG2100E, MSG2200, MSG2300. 📅 **Version**: Specifically noted as SoftwareVersion 3.90.

💀 **Privileges**: Likely Root/System level via web interface. 📂 **Data**: Full device compromise, data exfiltration, and potential lateral movement within the network.

🔐 **Auth Required**: Yes, PR:L (Privileges Required: Low). 🌐 **Access**: Remote (AV:N). ⚠️ **Threshold**: Low. Requires valid credentials but no user interaction (UI:N).

💣 **Public Exploits**: YES. Multiple PoCs available on GitHub (e.g., `fa-rrel`, `gh-ost00`, `jokeir07x`). 📢 **Status**: Actively disclosed and usable.

🔍 **Detection**: Scan for `list_base_config.php` endpoints. 🧪 **Test**: Inject payloads into the `template` parameter. 🛠️ **Tools**: Use Nuclei templates (`CVE-2024-7120.yaml`) for automated scanning.

🩹 **Patch**: Official vendor patch status not explicitly detailed in data, but vulnerability is classified as Critical. 📝 **Note**: Immediate mitigation is recommended until official fix is confirmed.

🚧 **Workaround**: Restrict access to the Web Interface (WAF/ACL). 🚫 **Input Validation**: Sanitize `template` parameters strictly. 🔒 **Network Segmentation**: Isolate affected gateways from critical network segments.

🔥 **Urgency**: HIGH. 📉 **CVSS**: 7.8 (High). 🚨 **Action**: Prioritize patching or immediate network isolation. Public exploits exist, making this an active threat.