Exploitation ongoing with high activity in latest observed window (1 mentions)
Recommended action window: Immediate (within 24h)
NVD description
A vulnerability, which was classified as critical, was found in Raisecom MSG1200, MSG2100E, MSG2200 and MSG2300 3.90. This affects an unknown part of the file list_base_config.php of the component Web Interface. The manipulation of the argument template leads to os command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-272451.
Priority
MEDIUM
Exploitation
ACTIVE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 8 products
| Date | Total | Labels |
|---|
| 2026-02-03 | 1 | General1 |
| 2026-09-07 | 1 | Active Exploitation1 |
@darkshadow2bd Image is of CVE-2024-7120, tips are obvious except burp collab which is just preference.
Post summary
The tweet briefly references CVE-2024-7120 and notes that tips are obvious, but it does not provide technical details, exploits, or any actionable information.
Attackers are exploiting CVE-2024-7120 to completely bypass SSH authentication on MikroTik RouterOS devices, gaining direct administrative access to network infrastructure. Once compromised, they're creating persistent backdoor accounts and using these devices to pivot through internal networks. Runtime segmentation helps contain lateral movement when network infrastructure becomes the attack vector. #ZeroTrust #CloudSecurity 🔗 Full TRC analysis: https://aviatrix.ai/threat-research-center/mikrotik-ssh-bypass-cve-2024-critical-vulnerability-september-2024
Post summary
Attackers are actively exploiting CVE‑2024‑7120 to bypass SSH authentication on MikroTik RouterOS, creating backdoor accounts and using the compromised devices for lateral movement.
8 of 8 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | raisecom | msg1200 | - | - | - |
| OS | raisecom | msg1200_firmware | 3.90 | - | - |
| HW | raisecom | msg2100e | - | - | - |
| OS | raisecom | msg2100e_firmware | 3.90 | - | - |
| HW | raisecom | msg2200 | - | - | - |
| OS | raisecom | msg2200_firmware | 3.90 | - | - |
| HW | raisecom | msg2300 | - | - | - |
| OS | raisecom | msg2300_firmware | 3.90 | - | - |