CVE-2023-25113

Multiple buffer overflow vulnerabilities exist in the vtyshubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to trigger these...

CVE-2023-25113

CVE-2023-25113 affects Milesight UR32L v32.3.0.5: multiple buffer overflow vulnerabilities in the vtysh_ubus binary (set_l2tp path) caused by unsafe sprintf usage. A specially crafted HTTP request can trigger these overflows, leading to arbitrary code execution with high privileges and network ac...