Raisecom · Raisecom Multi-Service Intelligent Gateway · CVE-2025-1536
**Name of the Vulnerable Software and Affected Versions**
Raisecom Multi-Service Intelligent Gateway up to 20250208
**Description**
A critical issue affects the Request Parameter Handler component, specifically the file /vpn/vpn template style.php. The manipulation of the `stylenum` argument leads to os command injection. This issue can be exploited remotely. The exploit has been publicly disclosed.
**Recommendations**
For Raisecom Multi-Service Intelligent Gateway up to 20250208, as a temporary workaround, consider restricting access to the /vpn/vpn template style.php file and avoid using the `stylenum` argument in the Request Parameter Handler until a patch is available. At the moment, there is no information about a newer version that contains a fix for this issue.