PT-2024-30122 · Totolink · Totolink X5000R

Name of the Vulnerable Software and Affected Versions: TOTOLINK X5000r version 9.1.0cu.2350 b20230313 Description: The issue is related to an OS command injection vulnerability in the setL2tpServerCfg function within the /cgi-bin/cstecgi.cgi file. Authenticated attackers can exploit this by sendi...

L2TP Code Execution

The vulnerability of the setl2tp function in the microprogramming software for the Milesight UR32L router is caused by a stack-based buffer overflow. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

L2TP Code Execution

The vulnerability of the setl2tp function in the microprogramming software for the Milesight UR32L router is caused by a stack-based buffer overflow. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

CVE-2023-25112

Multiple buffer overflow vulnerabilities exist in the vtyshubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to trigger these...

CVE-2023-25113

Multiple buffer overflow vulnerabilities exist in the vtyshubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to trigger these...

PT-2023-5149 · Milesight · Milesight Ur32L

Name of the Vulnerable Software and Affected Versions: Milesight UR32L version 32.3.0.5 Description: The issue is caused by a buffer overflow vulnerability in the set l2tp function of the vtysh ubus binary, due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to...

PT-2023-5083 · Milesight · Milesight Ur32L

Name of the Vulnerable Software and Affected Versions: Milesight UR32L version 32.3.0.5 Description: The issue is caused by a buffer overflow vulnerability in the set l2tp function of the vtysh ubus binary, due to the use of an unsafe sprintf pattern. This can be exploited by sending a specially...