CVE-2023-25109

Multiple buffer overflow vulnerabilities exist in the vtyshubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to trigger these...

CVE-2023-25109

CVE-2023-25109 describes multiple buffer overflow vulnerabilities in the Milesight UR32L v32.3.0.5, specifically in the vtysh_ubus binary. The root cause is an unsafe sprintf pattern that can overflow a local buffer during processing of HTTP-triggered requests via the UR32L’s /cgi-like interface....

CVE-2023-25109

Multiple buffer overflow vulnerabilities exist in the vtyshubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to trigger these...