CVE-2023-43260

CVE-2023-43260 affects Milesight UR5X, UR32L, UR32, UR35, UR41 prior to version 35.3.0.7 with an XSS vulnerability exploitable via the admin panel. The vulnerability is documented across multiple feeds (NVD/Red Hat/CVE lists) and is mitigated by upgrading to version 35.3.0.7 or later (per PT-2023...

PT-2023-28748 · Milesight · Milesight Ur32L +3

Name of the Vulnerable Software and Affected Versions: Milesight UR5X, UR32L, UR32, UR35, UR41 versions prior to 35.3.0.7 Description: A cross-site scripting XSS issue was discovered in the admin panel of the affected devices. This issue allows for malicious scripts to be injected into the websit...

CVE-2023-43260

Milesight UR5X, UR32L, UR32, UR35, UR41 before v35.3.0.7 was discovered to contain a cross-site scripting XSS vulnerability via the admin panel...

CVE-2023-43260

Milesight UR5X, UR32L, UR32, UR35, UR41 before v35.3.0.7 was discovered to contain a cross-site scripting XSS vulnerability via the admin panel...

Milesight Cross-Site Scripting Vulnerability

Milesight is a complete Artificial Intelligence Video Surveillance solution from China's StarZone IOT Milesight. A cross-site scripting vulnerability exists in Ursalink Milesight UR5X, UR32L, UR32, UR35, UR41 , Industrial Cellular Routers prior to v35.3.0.7, which stems from the admin panel being...

CVE-2023-43261

An information disclosure in Milesight UR5X, UR32L, UR32, UR35, UR41 before v35.3.0.7 allows attackers to access sensitive router components...

CVE-2023-43261

An information disclosure in Milesight UR5X, UR32L, UR32, UR35, UR41 before v35.3.0.7 allows attackers to access sensitive router components...

CVE-2023-43261

An information disclosure in Milesight UR5X, UR32L, UR32, UR35, UR41 before v35.3.0.7 allows attackers to access sensitive router components...

Information disclosure

An information disclosure in Milesight UR5X, UR32L, UR32, UR35, UR41 before v35.3.0.7 allows attackers to access sensitive router components...

CVE-2023-43261

An information disclosure in Milesight UR5X, UR32L, UR32, UR35, UR41 before v35.3.0.7 allows attackers to access sensitive router components...

CVE-2023-43261

CVE-2023-43261 affects Milesight UR5X, UR32L, UR32, UR35, UR41 (pre-35.3.0.7). The issue combines a misconfigured directory listing that exposes log files containing credentials and a hardcoded AES key/IV in JS, enabling access to sensitive router components and passwords. Public PoCs and writeup...

Milesight Log Information Disclosure Vulnerability

Milesight is a complete Artificial Intelligence Video Surveillance solution from China's StarZone IOT Milesight. A log information disclosure vulnerability exists in Milesight UR5X, UR32L, UR32, UR35, UR41, and Industrial Cellular Routers prior to v35.3.0.7, which stems from a vulnerability that...

CVE-2023-43261

An information disclosure in Milesight UR5X, UR32L, UR32, UR35, UR41 before v35.3.0.7 allows attackers to access sensitive router components...

PT-2023-5865

Name of the Vulnerable Software and Affected Versions Milesight UR5X, UR32L, UR32, UR35, UR41 versions prior to 35.3.0.7 Description An information disclosure issue exists in Milesight routers. This allows attackers to access sensitive router components. Reports indicate that approximately 19,000...

Exploit for Insertion of Sensitive Information into Log File in Milesight Ur5X_Firmware

CVE-2023-43261 - PoC Critical Vulnerability Exposes Sensit...

The vulnerability of the handle_interface_acl function in Milesight UR32L router software allows a hacker to execute arbitrary code.

The vulnerability of the handleinterfaceacl function in Milesight UR32L router microprogramming software arises due to a stack-based buffer overflow. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the set_gre function in the Milesight UR32L router’s microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the setgre function in the Milesight UR32L router’s microprogramming system is caused by a stack-based buffer overflow. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

The vulnerability of the `set_openvpn_client` function in the Milesight UR32L router software allows a hacker to execute arbitrary code.

The vulnerability of the setopenvpnclient function in the Milesight UR32L router microprogramming system is caused by a stack-based buffer overflow. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

The vulnerability of the `set_openvpn_client` function in the Milesight UR32L router software allows a hacker to execute arbitrary code.

The vulnerability of the setopenvpnclient function in the Milesight UR32L router microprogramming system is caused by a stack-based buffer overflow. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

The vulnerability of the set_pptp function in the microprogramming router software Milesight UR32L allows a hacker to execute arbitrary code.

The vulnerability of the setpptp function in the microprogramming router Milesight UR32L arises due to a buffer overflow based on a stack. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...