Milesight UR32L firewall_handler_set function buffer overflow vulnerability

The Milesight UR32L is a 4G industrial router from China’s Milesight. A buffer overflow vulnerability exists in the Milesight UR32L firewall_handler_set function due to incorrect boundary checking in the firewall_handler_set function. An authenticated, remote attacker could use this vulnerability to cause a buffer overflow and execute arbitrary code on the system or cause the application to crash.