3 matches found
CVE-2023-43260: Improper Neutralization of Input During Web Page Generation
Milesight UR5X, UR32L, UR32, UR35, UR41 before v35.3.0.7 was discovered to contain a cross-site scripting XSS vulnerability via the admin panel...
6.1CVSS6.2AI score0.00423EPSS
SaveExploits1References2
CVE-2023-43261
An information disclosure in Milesight UR5X, UR32L, UR32, UR35, UR41 before v35.3.0.7 allows attackers to access sensitive router components...
7.5CVSS7.3AI score0.63674EPSS
SaveExploits5References8
CVE-2023-43261: Insertion of Sensitive Information into Log File
An information disclosure in Milesight UR5X, UR32L, UR32, UR35, UR41 before v35.3.0.7 allows attackers to access sensitive router components...
7.5CVSS7.6AI score0.63674EPSS
SaveExploits5References4
20