CVE-2023-25098

Milesight UR32L v32.3.0.5 contains buffer overflow vulnerabilities in the vtysh_ubus binary (CVE-2023-25098) due to unsafe sprintf usage. The flaws reside in set_qos and related code that formats commands, allowing a network attacker with high privileges to trigger via specially crafted HTTP requ...

CVE-2023-25096

Multiple buffer overflow vulnerabilities exist in the vtyshubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to trigger these...

CVE-2023-25091

Multiple buffer overflow vulnerabilities exist in the vtyshubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to trigger these...

CVE-2023-25095

Multiple buffer overflow vulnerabilities exist in the vtyshubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to trigger these...

CVE-2023-25100

Multiple buffer overflow vulnerabilities exist in the vtyshubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to trigger these...

CVE-2023-25100

CVE-2023-25100 concerns Milesight UR32L, firmware v32.3.0.5, where multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary caused by unsafe sprintf usage. The flaw arises in set_qos and related code paths, enabling an attacker with high privileges to trigger HTTP requests over the...

CVE-2023-25099

Milesight UR32L v32.3.0.5 is affected by CVE-2023-25099 due to multiple buffer overflow vulnerabilities in the vtysh_ubus binary triggered by unsafe sprintf usage. The flaws reside in various vtysh_ubus command construction paths (e.g., set_qos, firewall/ACL, VPN and OpenVPN related commands) tha...

CVE-2023-25096

CVE-2023-25096 affects Milesight UR32L v32.3.0.5. The root cause is a buffer overflow in the vtysh_ubus binary (set_qos path and related QoS commands) caused by unsafe sprintf usage with user-controlled data (e.g., rule_name, class_name, etc.). An attacker with high privileges can trigger by send...

CVE-2023-25097

Milesight UR32L (v32.3.0.5) exposes a buffer-overflow vulnerability in the vtysh_ubus binary (set_qos path, attach_class/class_name) due to unsafe sprintf usage. The issue can be triggered by high-privileged, network-accessing attackers via crafted HTTP requests, potentially enabling arbitrary co...

CVE-2023-25094

Multiple buffer overflow vulnerabilities exist in the vtyshubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to trigger these...

CVE-2023-25098

Multiple buffer overflow vulnerabilities exist in the vtyshubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to trigger these...

CVE-2023-25099

Multiple buffer overflow vulnerabilities exist in the vtyshubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to trigger these...

CVE-2023-25090

Multiple buffer overflow vulnerabilities exist in the vtyshubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to trigger these...

CVE-2023-25088

CVE-2023-25088 affects Milesight UR32L (v32.3.0.5) via the vtysh_ubus firewall_handler_set code path. The vulnerability is a buffer overflow caused by unsafe use of sprintf with user-controlled data (src/dmz, old_mac, old_ip, ip, description, etc.) in multiple code paths (e.g., firewall_handler_s...

CVE-2023-25084

CVE-2023-25084 is a buffer-overflow vulnerability in Milesight UR32L v32.3.0.5, triggered by unsafe sprintf usage in the vtysh_ubus firewall_handler_set path. The issue affects the construction of commands using user-controlled fields (ip, mac, description), allowing a high-privilege attacker to ...

CVE-2023-25088

Multiple buffer overflow vulnerabilities exist in the vtyshubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to trigger these...

CVE-2023-25082

Multiple buffer overflow vulnerabilities exist in the vtyshubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to trigger these...

CVE-2023-25084

Multiple buffer overflow vulnerabilities exist in the vtyshubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to trigger these...

CVE-2023-25087

Multiple buffer overflow vulnerabilities exist in the vtyshubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to trigger these...

CVE-2023-25088

Multiple buffer overflow vulnerabilities exist in the vtyshubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to trigger these...