Lucene search
PRIOn knowledge basePRION:CVE-2023-25583HistoryJul 06, 2023 - 3:15 p.m.
Command injection
2023-07-0615:15:00
PRIOn knowledge base
www.prio-n.com
3
vulnerability
command injection
milesight ur32l
network request
code branch
vlan configuration
Two OS command injection vulnerabilities exist in the zebra vlan_name functionality of Milesight UR32L v32.3.0.5. A specially crafted network request can lead to command execution. An attacker can send a network request to trigger these vulnerabilities.This command injection is in the code branch that manages a new vlan configuration.
| CPE | Name | Operator | Version |
|---|---|---|---|
| ur32l_firmware | eq | 32.3.0.5 |
Related
nvd
nvd
CVE-2023-25583
2023-07-06 15:15:15
cve
cve
CVE-2023-25583
2023-07-06 15:15:15
cnvd
cnvd
Milesight UR32L zebra vlan_name function command injection vulnerability
2023-07-07 00:00:00
cvelist
cvelist
CVE-2023-25583
2023-07-06 14:53:22
talos
talos
Milesight UR32L zebra vlan_name OS command injection vulnerabilities
2023-07-06 00:00:00
talosblog
talosblog