CVE-2023-25094

Multiple buffer overflow vulnerabilities exist in the vtyshubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to trigger these...

CVE-2023-25094

Milesight UR32L (v32.3.0.5) is affected by CVE-2023-25094 due to multiple buffer overflow vulnerabilities in the vtysh_ubus binary caused by unsafe sprintf usage. A specially crafted HTTP request can trigger an overflow in the into_class_node path (class_name or old_class_name), enabling arbitrar...

CVE-2023-25094

Multiple buffer overflow vulnerabilities exist in the vtyshubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to trigger these...