CVE-2023-25089

Summary: CVE-2023-25089 affects Milesight UR32L v32.3.0.5. A buffer overflow in the vtysh_ubus binary’s handle_interface_acl function (with interface and in_acl conditions, notably in_acl = -1) can be triggered by a crafted HTTP request, allowing arbitrary code execution with high privileges over...