CVE-2023-25090

Multiple buffer overflow vulnerabilities exist in the vtyshubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to trigger these...

CVE-2023-25090

Multiple buffer overflow vulnerabilities exist in the vtyshubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to trigger these...

CVE-2023-25090

Summary (CVE-2023-25090, Milesight UR32L 32.3.0.5): The vtysh_ubus binary on UR32L is affected by multiple buffer-overflow vulnerabilities caused by unsafe sprintf usage in handling interface/ACL data. The flaws occur during operations such as handle_interface_acl and related firewall commands, w...