Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-55361
HistoryJul 10, 2023 - 12:00 a.m.

Milesight UR32L firewall_handler_set function buffer overflow vulnerability (CNVD-2023-55361)

2023-07-1000:00:00
China National Vulnerability Database
www.cnvd.org.cn
4
milesight ur32l
buffer overflow
firewall handler
security
vulnerability
code execution
authentication
remote attacker
china-based
milesight
application crash
boundary checking
cnvd-2023-55361

0.001 Low

EPSS

Percentile

30.6%

The Milesight UR32L is an industrial router from China-based Milesight. A buffer overflow vulnerability exists in the Milesight UR32L firewall_handler_set function due to incorrect boundary checking in the firewall_handler_set function. An authenticated, remote attacker could exploit this vulnerability to cause a buffer overflow and execute arbitrary code on the system, or cause the application to crash.

CPENameOperatorVersion
milesight milesight ur32l v32.eq3.0.5

0.001 Low

EPSS

Percentile

30.6%

Related for CNVD-2023-55361