CVE-2023-25117

CVE-2023-25117 concerns Milesight UR32L v32.3.0.5. Talos details a buffer overflow in the vtysh_ubus binary caused by an unsafe sprintf pattern, enabling a specially crafted HTTP request to trigger arbitrary code execution. The fault occurs in the vtysh_ubus logic tied to the OpenVPN client pathw...

CVE-2023-25116

CVE-2023-25116 affects Milesight UR32L v32.3.0.5, reported by Talos: multiple buffer overflow vulnerabilities in the vtysh_ubus component caused by unsafe sprintf usage. An attacker with high privileges can trigger these via crafted HTTP requests to the OpenVPN/VPN management flows, exploiting fu...

CVE-2023-25115

CVE-2023-25115 concerns Milesight UR32L v32.3.0.5. The connected sources confirm multiple buffer overflow vulnerabilities in the vtysh_ubus binary caused by unsafe sprintf usage on user-controlled data, triggered via specially crafted HTTP requests to OpenVPN-related functions (e.g., set_openvpn_...

CVE-2023-25122

Multiple buffer overflow vulnerabilities exist in the vtyshubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to trigger these...

CVE-2023-25114

Summary (CVE-2023-25114) : Talos and Red Hat advisories describe multiple buffer overflow vulnerabilities in Milesight UR32L v32.3.0.5, rooted in the vtysh_ubus code path. The flaws stem from unsafe sprintf usage that formats user-controlled data into a fixed-size buffer, enabling remote-triggere...

CVE-2023-25122

CVE-2023-25122 affects Milesight UR32L v32.3.0.5 (vtysh_ubus) with multiple buffer-overflow flaws caused by unsafe sprintf usage that propagates data from JSON blobmsg parsing into vtysh_command_buffer. A high-privileged attacker can trigger via crafted HTTP requests to the UR32L device, potentia...

CVE-2023-25119

Multiple buffer overflow vulnerabilities exist in the vtyshubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to trigger these...

CVE-2023-25101

Multiple buffer overflow vulnerabilities exist in the vtyshubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to trigger these...

CVE-2023-25106

Milesight UR32L v32.3.0.5 is affected by multiple buffer overflow vulnerabilities in the vtysh_ubus binary, caused by unsafe use of sprintf. The flaws are triggered by crafted HTTP requests (network access) and can lead to arbitrary code execution. The root cause is unsafe pattern usage in variou...

CVE-2023-25105

CVE-2023-25105 concerns Milesight UR32L v32.3.0.5 where the vtysh_ubus binary contains a buffer overflow due to an unsafe sprintf pattern. Talos-affiliated analysis documents multiple vulnerable code paths (set_ike_profile, various vtysh_ubus handlers) that construct commands via sprintf with use...

CVE-2023-25111

Multiple buffer overflow vulnerabilities exist in the vtyshubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to trigger these...

CVE-2023-25107

Multiple buffer overflow vulnerabilities exist in the vtyshubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to trigger these...

CVE-2023-25104

Multiple buffer overflow vulnerabilities exist in the vtyshubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to trigger these...

CVE-2023-25111

Multiple buffer overflow vulnerabilities exist in the vtyshubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to trigger these...

CVE-2023-25106

Multiple buffer overflow vulnerabilities exist in the vtyshubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to trigger these...

CVE-2023-25110

Multiple buffer overflow vulnerabilities exist in the vtyshubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to trigger these...

CVE-2023-25104

Milesight UR32L (v32.3.0.5) is affected by CVE-2023-25104 due to a buffer overflow in the vtysh_ubus binary’s set_ike_profile path. The vulnerability stems from an unsafe sprintf pattern used with username and password, allowing a high-privilege attacker to trigger HTTP requests over the network ...

CVE-2023-25107

Multiple buffer overflow vulnerabilities exist in the vtyshubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to trigger these...

CVE-2023-25108

Multiple buffer overflow vulnerabilities exist in the vtyshubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to trigger these...

CVE-2023-25106

Multiple buffer overflow vulnerabilities exist in the vtyshubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to trigger these...