Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-22653
HistoryJul 06, 2023 - 3:15 p.m.

Command injection

2023-07-0615:15:00
PRIOn knowledge base
www.prio-n.com
7
os command injection
vtysh_ubus
tcpdump_start_cb
milesight ur32l
v32.3.0.5
command execution
crafted http request
authenticated attacker
vulnerability
nvd

8.8 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

55.1%

An OS command injection vulnerability exists in the vtysh_ubus tcpdump_start_cb functionality of Milesight UR32L v32.3.0.5. A specially crafted HTTP request can lead to command execution. An authenticated attacker can send an HTTP request to trigger this vulnerability.

CPENameOperatorVersion
ur32l_firmwareeq32.3.0.5

8.8 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

55.1%

Related for PRION:CVE-2023-22653