CVE-2023-24595

An OS command injection vulnerability exists in the ysthirdparty systemuserscript functionality of Milesight UR32L v32.3.0.5. A specially crafted series of network requests can lead to command execution. An attacker can send a sequence of requests to trigger this vulnerability...

PT-2023-19698

Name of the Vulnerable Software and Affected Versions Milesight UR32L version 32.3.0.5 Description An OS command injection issue exists in the ys thirdparty system user script functionality. A specially crafted series of network requests can lead to command execution. An attacker can send a...

Milesight UR32L 操作系统命令注入漏洞

The Milesight UR32L is a 4G industrial router from China's Milesight. A command injection vulnerability exists in the Milesight UR32L ysthirdparty systemuserscript function, which can be exploited by an attacker to execute arbitrary commands on the system...