958 matches found
CVE-2023-43261
An information disclosure in Milesight UR5X, UR32L, UR32, UR35, UR41 before v35.3.0.7 allows attackers to access sensitive router components...
CVE-2023-43261
An information disclosure in Milesight UR5X, UR32L, UR32, UR35, UR41 before v35.3.0.7 allows attackers to access sensitive router components...
Information disclosure
An information disclosure in Milesight UR5X, UR32L, UR32, UR35, UR41 before v35.3.0.7 allows attackers to access sensitive router components...
CVE-2023-43261
An information disclosure in Milesight UR5X, UR32L, UR32, UR35, UR41 before v35.3.0.7 allows attackers to access sensitive router components...
CVE-2023-43261
An information disclosure in Milesight UR5X, UR32L, UR32, UR35, UR41 before v35.3.0.7 allows attackers to access sensitive router components...
CVE-2023-43261
CVE-2023-43261 affects Milesight UR5X, UR32L, UR32, UR35, UR41 (pre-35.3.0.7). The issue combines a misconfigured directory listing that exposes log files containing credentials and a hardcoded AES key/IV in JS, enabling access to sensitive router components and passwords. Public PoCs and writeup...
Milesight Log Information Disclosure Vulnerability
Milesight is a complete Artificial Intelligence Video Surveillance solution from China's StarZone IOT Milesight. A log information disclosure vulnerability exists in Milesight UR5X, UR32L, UR32, UR35, UR41, and Industrial Cellular Routers prior to v35.3.0.7, which stems from a vulnerability that...
PT-2023-5865
Name of the Vulnerable Software and Affected Versions Milesight UR5X, UR32L, UR32, UR35, UR41 versions prior to 35.3.0.7 Description An information disclosure issue exists in Milesight routers. This allows attackers to access sensitive router components. Reports indicate that approximately 19,000...
Exploit for Insertion of Sensitive Information into Log File in Milesight Ur5X_Firmware
CVE-2023-43261 - PoC Critical Vulnerability Exposes Sensit...
The vulnerability of the set_pptp function in the microprogramming router software Milesight UR32L allows a hacker to execute arbitrary code.
The vulnerability of the setpptp function in the microprogramming router Milesight UR32L arises due to a buffer overflow based on a stack. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...
The vulnerability of the firewall_handler_set function in the Milesight UR32L router software allows a hacker to execute arbitrary code.
The vulnerability of the firewallhandlerset function in the Milesight UR32L router microprogramming system is caused by a stack-based buffer overflow. Exploiting this vulnerability could allow an attacker operating remotely to execute arbitrary code...
The vulnerability of the handle_interface_acl function in Milesight UR32L router software allows a hacker to execute arbitrary code.
The vulnerability of the handleinterfaceacl function in Milesight UR32L router microprogramming software arises due to a stack-based buffer overflow. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
The vulnerability of the set_gre function in the Milesight UR32L router’s microprogramming software allows a hacker to execute arbitrary code.
The vulnerability of the setgre function in the Milesight UR32L router’s microprogramming system is caused by a stack-based buffer overflow. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...
The vulnerability of the `set_openvpn_client` function in the Milesight UR32L router software allows a hacker to execute arbitrary code.
The vulnerability of the setopenvpnclient function in the Milesight UR32L router microprogramming system is caused by a stack-based buffer overflow. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...
The vulnerability of the set_qos function in the Milesight UR32L router software allows a hacker to execute arbitrary code.
The vulnerability of the setqos function in the Milesight UR32L router microprogramming system arises due to a stack-based buffer overflow. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...
The vulnerability of the `set_openvpn_client` function in the Milesight UR32L router software allows a hacker to execute arbitrary code.
The vulnerability of the setopenvpnclient function in the Milesight UR32L router microprogramming system is caused by a stack-based buffer overflow. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...
The vulnerability of the set_gre function in the Milesight UR32L router’s microprogramming software allows a hacker to execute arbitrary code.
The vulnerability of the setgre function in the Milesight UR32L router’s microprogramming system is caused by a stack-based buffer overflow. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...
The vulnerability of the set_ike_profile function in the Milesight UR32L router software allows a hacker to execute arbitrary code.
The vulnerability of the setikeprofile function in the Milesight UR32L router microprogramming system arises due to a buffer overflow based on a stack. Exploiting this vulnerability can allow an attacker operating remotely to execute arbitrary code...
The vulnerability of the firewall_handler_set function in the Milesight UR32L router software allows a hacker to execute arbitrary code.
The vulnerability of the firewallhandlerset function in the Milesight UR32L router microprogramming system is caused by a stack-based buffer overflow. Exploiting this vulnerability could allow an attacker operating remotely to execute arbitrary code...
The vulnerability of the set_ike_profile function in the Milesight UR32L router software allows a hacker to execute arbitrary code.
The vulnerability of the setikeprofile function in the Milesight UR32L router microprogramming system arises due to a buffer overflow based on a stack. Exploiting this vulnerability can allow an attacker operating remotely to execute arbitrary code...