CVE-2023-25111

Multiple buffer overflow vulnerabilities exist in the vtyshubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to trigger these...

CVE-2023-25111

CVE-2023-25111 affects Milesight UR32L v32.3.0.5. The vulnerability is a set of buffer overflows in the vtysh_ubus binary caused by unsafe sprintf usage, enabling an attacker with high privileges to trigger HTTP requests that may lead to arbitrary code execution. The issue prominently centers on ...

CVE-2023-25111

Multiple buffer overflow vulnerabilities exist in the vtyshubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to trigger these...