Milesight UR32L zebra vlan_name function command execution vulnerability

The Milesight UR32L is a 4G industrial router from China’s Milesight. A buffer overflow vulnerability exists in the Milesight UR32L security_decrypt_password function, which can be exploited by an attacker to cause a buffer overflow and execute arbitrary code on the system, or cause an application to crash.