CVE-2023-25119

Multiple buffer overflow vulnerabilities exist in the vtyshubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to trigger these...

The vulnerability of the set_pptp function in the microprogramming router software Milesight UR32L allows a hacker to execute arbitrary code.

The vulnerability of the setpptp function in the microprogramming router Milesight UR32L arises due to a buffer overflow based on a stack. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

CVE-2023-25119: Stack-based Buffer Overflow

Multiple buffer overflow vulnerabilities exist in the vtyshubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to trigger these...