CVE-2023-25117

CVE-2023-25117 concerns Milesight UR32L v32.3.0.5. Talos details a buffer overflow in the vtysh_ubus binary caused by an unsafe sprintf pattern, enabling a specially crafted HTTP request to trigger arbitrary code execution. The fault occurs in the vtysh_ubus logic tied to the OpenVPN client pathw...