CVE-2023-25088

Multiple buffer overflow vulnerabilities exist in the vtyshubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to trigger these...

CVE-2023-25082

Multiple buffer overflow vulnerabilities exist in the vtyshubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to trigger these...

CVE-2023-25084

Multiple buffer overflow vulnerabilities exist in the vtyshubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to trigger these...

CVE-2023-25087

Multiple buffer overflow vulnerabilities exist in the vtyshubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to trigger these...

CVE-2023-25084

Multiple buffer overflow vulnerabilities exist in the vtyshubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to trigger these...

CVE-2023-25088

CVE-2023-25088 affects Milesight UR32L (v32.3.0.5) via the vtysh_ubus firewall_handler_set code path. The vulnerability is a buffer overflow caused by unsafe use of sprintf with user-controlled data (src/dmz, old_mac, old_ip, ip, description, etc.) in multiple code paths (e.g., firewall_handler_s...

CVE-2023-25086

CVE-2023-25086 is a buffer-overflow vulnerability in Milesight UR32L v32.3.0.5, triggered in the vtysh_ubus binary under the firewall_handler_set function (and related code paths) where user-controlled data is fed into unsafe sprintf calls (e.g., using index, dport, ip, mac, description, etc.). A...

CVE-2023-25088

Multiple buffer overflow vulnerabilities exist in the vtyshubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to trigger these...

CVE-2023-25084

CVE-2023-25084 is a buffer-overflow vulnerability in Milesight UR32L v32.3.0.5, triggered by unsafe sprintf usage in the vtysh_ubus firewall_handler_set path. The issue affects the construction of commands using user-controlled fields (ip, mac, description), allowing a high-privilege attacker to ...

CVE-2023-25083

Multiple buffer overflow vulnerabilities exist in the vtyshubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to trigger these...

CVE-2023-25086

Multiple buffer overflow vulnerabilities exist in the vtyshubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to trigger these...

CVE-2023-25087

Multiple buffer overflow vulnerabilities exist in the vtyshubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to trigger these...

CVE-2023-25082

Milesight UR32L (v32.3.0.5) is affected by CVE-2023-25082 via multiple buffer overflow vulnerabilities in the vtysh_ubus firewall_handler_set path. An attacker with high privileges can trigger arbitrary code execution by sending crafted HTTP requests that abuse unsafe sprintf usage with old_ip/ol...

CVE-2023-25081

CVE-2023-25081 affects Milesight UR32L v32.3.0.5. The Talos-report details a set of buffer-overflow vulnerabilities in the vtysh_ubus binary (UR32L HTTP/UBUS interface) triggered by the firewall_handler_set path. Specifically, the vulnerability arises from using unsafe sprintf to compose commands...

CVE-2023-25086

Multiple buffer overflow vulnerabilities exist in the vtyshubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to trigger these...

CVE-2023-25083

Multiple buffer overflow vulnerabilities exist in the vtyshubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to trigger these...

CVE-2023-25085

Multiple buffer overflow vulnerabilities exist in the vtyshubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to trigger these...

CVE-2023-25087

CVE-2023-25087 affects Milesight UR32L v32.3.0.5. The issue is a buffer overflow in the vtysh_ubus binary’s firewall_handler_set path, caused by unsafe use of sprintf with user-controlled data. Exploitation requires an authenticated, high-privilege attacker sending crafted HTTP requests to the af...

CVE-2023-25085

Multiple buffer overflow vulnerabilities exist in the vtyshubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to trigger these...

CVE-2023-25083

CVE-2023-25083 affects Milesight UR32L (v32.3.0.5). The issue is a buffer overflow in the vtysh_ubus firewall_handler_set path, caused by unsafe use of sprintf with user-controlled data (ip, mac, and related fields). The vulnerability is exploitable via crafted HTTP requests and can lead to arbit...