CVE-2023-25098

Milesight UR32L v32.3.0.5 contains buffer overflow vulnerabilities in the vtysh_ubus binary (CVE-2023-25098) due to unsafe sprintf usage. The flaws reside in set_qos and related code that formats commands, allowing a network attacker with high privileges to trigger via specially crafted HTTP requ...

CVE-2023-25098

Multiple buffer overflow vulnerabilities exist in the vtyshubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to trigger these...