CVE-2023-25115

CVE-2023-25115 concerns Milesight UR32L v32.3.0.5. The connected sources confirm multiple buffer overflow vulnerabilities in the vtysh_ubus binary caused by unsafe sprintf usage on user-controlled data, triggered via specially crafted HTTP requests to OpenVPN-related functions (e.g., set_openvpn_...

CVE-2023-25112

Multiple buffer overflow vulnerabilities exist in the vtyshubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to trigger these...

CVE-2023-25120

Multiple buffer overflow vulnerabilities exist in the vtyshubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to trigger these...

CVE-2023-25122

Multiple buffer overflow vulnerabilities exist in the vtyshubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to trigger these...

CVE-2023-25116

Multiple buffer overflow vulnerabilities exist in the vtyshubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to trigger these...

CVE-2023-25121

Multiple buffer overflow vulnerabilities exist in the vtyshubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to trigger these...

CVE-2023-25120

Multiple buffer overflow vulnerabilities exist in the vtyshubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to trigger these...

CVE-2023-25113

CVE-2023-25113 affects Milesight UR32L v32.3.0.5: multiple buffer overflow vulnerabilities in the vtysh_ubus binary (set_l2tp path) caused by unsafe sprintf usage. A specially crafted HTTP request can trigger these overflows, leading to arbitrary code execution with high privileges and network ac...

CVE-2023-25118

CVE-2023-25118 affects Milesight UR32L v32.3.0.5. The issue stems from multiple buffer overflow vulnerabilities in the vtysh_ubus binary, caused by using an unsafe sprintf pattern when handling user-controlled data (e.g., username/password) in OpenVPN-related functions. A specially crafted HTTP r...

CVE-2023-25112

CVE-2023-25112 (Milesight UR32L, v32.3.0.5) : Talos Red Hat and NVD entries confirm a buffer overflow in the vtysh_ubus binary, specifically in set_l2tp handling of remote_subnet and remote_mask. An attacker with high privileges can trigger the overflow by crafting HTTP requests to the UR32L, ena...

CVE-2023-25116

Multiple buffer overflow vulnerabilities exist in the vtyshubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to trigger these...

CVE-2023-25119

CVE-2023-25119 refers to multiple buffer overflow vulnerabilities in Milesight UR32L v32.3.0.5, specifically in the vtysh_ubus binary. The root cause is unsafe use of sprintf patterns that assemble commands from untrusted input (notably involving remote_subnet/remote_mask in set_pptp and related ...

CVE-2023-25121

Multiple buffer overflow vulnerabilities exist in the vtyshubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to trigger these...

CVE-2023-25117

Multiple buffer overflow vulnerabilities exist in the vtyshubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to trigger these...

CVE-2023-25114

Multiple buffer overflow vulnerabilities exist in the vtyshubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to trigger these...

CVE-2023-25121

CVE-2023-25121 affects Milesight UR32L v32.3.0.5. The vulnerability is a buffer overflow in the vtysh_ubus binary caused by unsafe sprintf usage with the secrets_local variable in set_ike_profile, allowing an unauthenticated attacker with high privileges to trigger via crafted HTTP requests and e...

CVE-2023-25119

Multiple buffer overflow vulnerabilities exist in the vtyshubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to trigger these...

CVE-2023-25117

Multiple buffer overflow vulnerabilities exist in the vtyshubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to trigger these...

CVE-2023-25118

Multiple buffer overflow vulnerabilities exist in the vtyshubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to trigger these...

CVE-2023-25113

Multiple buffer overflow vulnerabilities exist in the vtyshubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to trigger these...