Lucene search

K
cve[email protected]CVE-2023-43261
HistoryOct 04, 2023 - 12:15 p.m.

CVE-2023-43261

2023-10-0412:15:10
CWE-532
web.nvd.nist.gov
31
28
cve-2023-43261
milesight
ur5x
ur32l
ur32
ur35
ur41
information disclosure
router security

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

7.1 High

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

80.2%

An information disclosure in Milesight UR5X, UR32L, UR32, UR35, UR41 before v35.3.0.7 allows attackers to access sensitive router components.

Affected configurations

NVD
Node
milesightur51Match-
OR
milesightur52Match-
OR
milesightur55Match-
AND
milesightur5x_firmwareRange<35.3.0.7
Node
milesightur32lMatch-
AND
milesightur32l_firmwareRange<35.3.0.7
Node
milesightur32Match-
AND
milesightur32_firmwareRange<35.3.0.7
Node
milesightur35Match-
AND
milesightur35_firmwareRange<35.3.0.7
Node
milesightur41_firmwareRange<35.3.0.7
AND
milesightur41Match-

Social References

More

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

7.1 High

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

80.2%