Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-25094
HistoryJul 06, 2023 - 3:15 p.m.

Buffer overflow

2023-07-0615:15:00
PRIOn knowledge base
www.prio-n.com
3
buffer overflow
vtysh ubus binary
milesight ur32l
arbitrary code execution
http request
privilege escalation
vulnerabilities

7.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

33.5%

Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to trigger these vulnerabilities.This buffer overflow occurs in the into_class_node function with either the class_name or old_class_name variable.

CPENameOperatorVersion
ur32l_firmwareeq32.3.0.5

7.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

33.5%

Related for PRION:CVE-2023-25094