CVE-2023-23546

🗓️ 06 Jul 2023 14:53:30Reported by talosType

A misconfiguration vulnerability in urvpn_client of Milesight UR32L v32.3.0.5 allows for a man-in-the-middle attack, leading to increased privileges

Reporter	Title	Published	Views	Family All 13
CNNVD	Milesight UR32L 信任管理问题漏洞	6 Jul 202300:00	–	cnnvd
CNVD	Milesight UR32L urvpn_client function misconfiguration vulnerability	10 Jul 202300:00	–	cnvd
Cvelist	CVE-2023-23546	6 Jul 202314:53	–	cvelist
EUVD	EUVD-2023-27646	3 Oct 202520:07	–	euvd
NVD	CVE-2023-23546	6 Jul 202315:15	–	nvd
OSV	CVE-2023-23546	6 Jul 202315:15	–	osv
Prion	Privilege escalation	6 Jul 202315:15	–	prion
Positive Technologies	PT-2023-19028 · Milesight · Milesight Ur32L	6 Jul 202300:00	–	ptsecurity
RedhatCVE	CVE-2023-23546	23 May 202503:18	–	redhatcve
Talos	Milesight UR32L urvpn_client Certificate Validation vulnerability	6 Jul 202300:00	–	talos

NVD

Vulners

Node

milesight ur32l_firmwareMatch32.3.0.5

AND

milesight ur32lMatch-

[
  {
    "vendor": "Milesight",
    "product": "UR32L",
    "versions": [
      {
        "version": "v32.3.0.5",
        "status": "affected"
      }
    ]
  }
]

Source	Link
talosintelligence	www.talosintelligence.com/vulnerability_reports/TALOS-2023-1705
talosintelligence	www.talosintelligence.com/vulnerability_reports/TALOS-2023-1705

21 Nov 2024 07:46Current

8.2High risk

Vulners AI Score8.2

CVSS 3.14.2 - 8.1

EPSS0.00135

SSVC

CWE-295