Milesight UR32L 操作系统命令注入漏洞

The Milesight UR32L is a 4G industrial router from China's Milesight. A command injection vulnerability exists in the Milesight UR32L libzebra.so changehostname function, which can be exploited by an attacker to execute arbitrary commands on the system...

PT-2023-18608

Name of the Vulnerable Software and Affected Versions Milesight UR32L version 32.3.0.5 Description An os command injection issue exists in the libzebra.so change hostname functionality. A specially-crafted network packet can lead to command execution. An attacker can send a sequence of requests t...