CVE-2023-25112

Multiple buffer overflow vulnerabilities exist in the vtyshubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to trigger these...

CVE-2023-25122

CVE-2023-25122 affects Milesight UR32L v32.3.0.5 (vtysh_ubus) with multiple buffer-overflow flaws caused by unsafe sprintf usage that propagates data from JSON blobmsg parsing into vtysh_command_buffer. A high-privileged attacker can trigger via crafted HTTP requests to the UR32L device, potentia...

CVE-2023-25115

Multiple buffer overflow vulnerabilities exist in the vtyshubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to trigger these...

CVE-2023-25117

CVE-2023-25117 concerns Milesight UR32L v32.3.0.5. Talos details a buffer overflow in the vtysh_ubus binary caused by an unsafe sprintf pattern, enabling a specially crafted HTTP request to trigger arbitrary code execution. The fault occurs in the vtysh_ubus logic tied to the OpenVPN client pathw...

CVE-2023-25115

CVE-2023-25115 concerns Milesight UR32L v32.3.0.5. The connected sources confirm multiple buffer overflow vulnerabilities in the vtysh_ubus binary caused by unsafe sprintf usage on user-controlled data, triggered via specially crafted HTTP requests to OpenVPN-related functions (e.g., set_openvpn_...

CVE-2023-25115

Multiple buffer overflow vulnerabilities exist in the vtyshubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to trigger these...

CVE-2023-25114

Summary (CVE-2023-25114) : Talos and Red Hat advisories describe multiple buffer overflow vulnerabilities in Milesight UR32L v32.3.0.5, rooted in the vtysh_ubus code path. The flaws stem from unsafe sprintf usage that formats user-controlled data into a fixed-size buffer, enabling remote-triggere...

CVE-2023-25120

CVE-2023-25120 affects Milesight UR32L v32.3.0.5. The issue is a set_dmvpn buffer overflow in vtysh_ubus caused by unsafe sprintf usage with the cisco_secret variable, allowing remote code execution via crafted HTTP requests. The vulnerability is rated CVSS 3.1 base score 7.2 (HIGH); attacker mus...

CVE-2023-25112

Multiple buffer overflow vulnerabilities exist in the vtyshubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to trigger these...

CVE-2023-25116

Multiple buffer overflow vulnerabilities exist in the vtyshubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to trigger these...

CVE-2023-25113

CVE-2023-25113 affects Milesight UR32L v32.3.0.5: multiple buffer overflow vulnerabilities in the vtysh_ubus binary (set_l2tp path) caused by unsafe sprintf usage. A specially crafted HTTP request can trigger these overflows, leading to arbitrary code execution with high privileges and network ac...

CVE-2023-25121

Multiple buffer overflow vulnerabilities exist in the vtyshubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to trigger these...

CVE-2023-25120

Multiple buffer overflow vulnerabilities exist in the vtyshubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to trigger these...

CVE-2023-25118

CVE-2023-25118 affects Milesight UR32L v32.3.0.5. The issue stems from multiple buffer overflow vulnerabilities in the vtysh_ubus binary, caused by using an unsafe sprintf pattern when handling user-controlled data (e.g., username/password) in OpenVPN-related functions. A specially crafted HTTP r...

CVE-2023-25122

Multiple buffer overflow vulnerabilities exist in the vtyshubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to trigger these...

CVE-2023-25120

Multiple buffer overflow vulnerabilities exist in the vtyshubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to trigger these...

CVE-2023-25112

CVE-2023-25112 (Milesight UR32L, v32.3.0.5) : Talos Red Hat and NVD entries confirm a buffer overflow in the vtysh_ubus binary, specifically in set_l2tp handling of remote_subnet and remote_mask. An attacker with high privileges can trigger the overflow by crafting HTTP requests to the UR32L, ena...

CVE-2023-25121

Multiple buffer overflow vulnerabilities exist in the vtyshubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to trigger these...

CVE-2023-25121

CVE-2023-25121 affects Milesight UR32L v32.3.0.5. The vulnerability is a buffer overflow in the vtysh_ubus binary caused by unsafe sprintf usage with the secrets_local variable in set_ike_profile, allowing an unauthenticated attacker with high privileges to trigger via crafted HTTP requests and e...

CVE-2023-25119

Multiple buffer overflow vulnerabilities exist in the vtyshubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to trigger these...