958 matches found
Milesight VPN SQL注入漏洞
Milesight is a complete Artificial Intelligence Video Surveillance solution from China's StarZone IOT Milesight. A SQL injection vulnerability exists in Milesight VPN version v2.0.2. An attacker exploits the vulnerability to cause authentication bypass via a specially crafted web request...
PT-2023-5078 · Milesight · Milesight Ur32L
Name of the Vulnerable Software and Affected Versions: Milesight UR32L version 32.3.0.5 Description: Multiple buffer overflow vulnerabilities exist in the vtysh ubus binary due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An...
Milesight UR32L urvpn_client http_connection_readcb stack-based buffer overflow vulnerability
Talos Vulnerability Report TALOS-2023-1718 Milesight UR32L urvpnclient httpconnectionreadcb stack-based buffer overflow vulnerability July 6, 2023 CVE Number CVE-2023-24019 SUMMARY A stack-based buffer overflow vulnerability exists in the urvpnclient httpconnectionreadcb functionality of Milesigh...
Milesight UR32L libzebra.so security_decrypt_password buffer overflow vulnerability
Talos Vulnerability Report TALOS-2023-1715 Milesight UR32L libzebra.so securitydecryptpassword buffer overflow vulnerability July 6, 2023 CVE Number CVE-2023-24018 SUMMARY A stack-based buffer overflow vulnerability exists in the libzebra.so.0.0.0 securitydecryptpassword functionality of Milesigh...
PT-2023-19028 · Milesight · Milesight Ur32L
Name of the Vulnerable Software and Affected Versions: Milesight UR32L version 32.3.0.5 Description: A misconfiguration issue exists in the urvpn client functionality, allowing a specially-crafted man-in-the-middle attack to lead to increased privileges. An attacker can exploit this by performing...
Milesight VPN 安全漏洞
Milesight VPN is a web-based VPN monitoring and management platform from China-based Milesight. A security vulnerability exists in Milesight VPN v2.0.2. An attacker can exploit this vulnerability to cause arbitrary Javascript code injection via a specially crafted HTTP request...
Milesight UR32L 缓冲区错误漏洞
The Milesight UR32L is a 4G industrial router from China-based Milesight. A security vulnerability exists in the Milesight UR32L version v32.3.0.5, which stems from the use of an insecure sprintf pattern. An attacker could exploit the vulnerability to cause a buffer overflow via a specially craft...
PT-2023-5090 · Milesight · Milesight Ur32L
Name of the Vulnerable Software and Affected Versions: Milesight UR32L version 32.3.0.5 Description: The issue is caused by a buffer overflow vulnerability in the handle interface acl function of the Milesight UR32L router's firmware. This vulnerability can be exploited by a remote attacker to...
PT-2023-5144 · Milesight · Milesight Ur32L
Name of the Vulnerable Software and Affected Versions: Milesight UR32L version 32.3.0.5 Description: The issue is caused by multiple buffer overflow vulnerabilities in the vtysh ubus binary due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code...
Milesight UR32L 操作系统命令注入漏洞
The Milesight UR32L is a 4G industrial router from China's Milesight. A command injection vulnerability exists in the Milesight UR32L vtyshubus tcpdumpstartcb function, which can be exploited by an attacker to execute arbitrary commands on the system...
Milesight UR32L 缓冲区错误漏洞
The Milesight UR32L is a 4G industrial router from China's Milesight. A buffer overflow vulnerability exists in the Milesight UR32L setqos function, which can be exploited by an attacker to cause a buffer overflow and execute arbitrary code on the system, or cause an application to crash...
CVE-2023-32220
Milesight NCR/camera version 71.8.0.6-r5 allows authentication bypass through an unspecified method...
CVE-2023-32220
Milesight NCR/camera version 71.8.0.6-r5 allows authentication bypass through an unspecified method...
Authentication flaw
Milesight NCR/camera version 71.8.0.6-r5 allows authentication bypass through an unspecified method...
Milesight 授权问题漏洞
Milesight is a complete artificial intelligence video surveillance solution from China-based Milesight. A security vulnerability exists in Milesight NCR/camera version 71.8.0.6-r5, which stems from a vulnerability that allows authentication to be bypassed via an unspecified method...
CVE-2023-32220 Milesight NCR/Camera Authentication Bypass
Milesight NCR/camera version 71.8.0.6-r5 allows authentication bypass through an unspecified method...
PT-2023-23667 · Milesight · Milesight Ncr/Camera
Name of the Vulnerable Software and Affected Versions: Milesight NCR/camera version 71.8.0.6-r5 Description: The issue allows authentication bypass through an unspecified method. Recommendations: For Milesight NCR/camera version 71.8.0.6-r5, at the moment, there is no information about a newer...
CVE-2023-32220 Milesight NCR/Camera Authentication Bypass
Milesight NCR/camera version 71.8.0.6-r5 allows authentication bypass through an unspecified method...
CVE-2023-32220
CVE-2023-32220 : Based on the provided documents, Milesight NCR/camera version 71.8.0.6-r5 is affected by an authentication bypass via an unspecified method. The NVD entry lists a base score of 9.8 (CRITICAL) under CVSS 3.1, with attack vector NETWORK, no privileges required, and user interaction...
