CVE-2023-25089

Multiple buffer overflow vulnerabilities exist in the vtyshubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to trigger these...

CVE-2023-25094

Milesight UR32L (v32.3.0.5) is affected by CVE-2023-25094 due to multiple buffer overflow vulnerabilities in the vtysh_ubus binary caused by unsafe sprintf usage. A specially crafted HTTP request can trigger an overflow in the into_class_node path (class_name or old_class_name), enabling arbitrar...

CVE-2023-25090

Multiple buffer overflow vulnerabilities exist in the vtyshubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to trigger these...

CVE-2023-25098

Multiple buffer overflow vulnerabilities exist in the vtyshubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to trigger these...

CVE-2023-25092

Multiple buffer overflow vulnerabilities exist in the vtyshubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to trigger these...

CVE-2023-25090

Summary (CVE-2023-25090, Milesight UR32L 32.3.0.5): The vtysh_ubus binary on UR32L is affected by multiple buffer-overflow vulnerabilities caused by unsafe sprintf usage in handling interface/ACL data. The flaws occur during operations such as handle_interface_acl and related firewall commands, w...

CVE-2023-25093

CVE-2023-25093 concerns Milesight UR32L v32.3.0.5 (vtysh_ubus) with multiple buffer-overflow vulnerabilities caused by unsafe sprintf usage. Talos (TALOS-2023-1716) describes a pattern where user-controlled data parsed from JSON/blobmsg leads to formatting into vtysh_command buffers, enabling pot...

CVE-2023-25091

CVE-2023-25091 (Milesight UR32L) : The vtysh_ubus component in UR32L v32.3.0.5 has multiple buffer overflow vulnerabilities, caused by unsafe sprintf usage in handle_interface_acl (interface variable when out_acl = -1). A high-privilege attacker can send crafted HTTP requests over the network to ...

CVE-2023-25094

Multiple buffer overflow vulnerabilities exist in the vtyshubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to trigger these...

CVE-2023-25098

Milesight UR32L v32.3.0.5 contains buffer overflow vulnerabilities in the vtysh_ubus binary (CVE-2023-25098) due to unsafe sprintf usage. The flaws reside in set_qos and related code that formats commands, allowing a network attacker with high privileges to trigger via specially crafted HTTP requ...

CVE-2023-25094

Multiple buffer overflow vulnerabilities exist in the vtyshubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to trigger these...

CVE-2023-25092

Multiple buffer overflow vulnerabilities exist in the vtyshubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to trigger these...

CVE-2023-25090

Multiple buffer overflow vulnerabilities exist in the vtyshubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to trigger these...

CVE-2023-25100

Multiple buffer overflow vulnerabilities exist in the vtyshubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to trigger these...

CVE-2023-25095

Multiple buffer overflow vulnerabilities exist in the vtyshubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to trigger these...

CVE-2023-25091

Multiple buffer overflow vulnerabilities exist in the vtyshubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to trigger these...

CVE-2023-25099

Multiple buffer overflow vulnerabilities exist in the vtyshubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to trigger these...

CVE-2023-25099

Multiple buffer overflow vulnerabilities exist in the vtyshubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to trigger these...

CVE-2023-25098

Multiple buffer overflow vulnerabilities exist in the vtyshubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to trigger these...

CVE-2023-25099

Milesight UR32L v32.3.0.5 is affected by CVE-2023-25099 due to multiple buffer overflow vulnerabilities in the vtysh_ubus binary triggered by unsafe sprintf usage. The flaws reside in various vtysh_ubus command construction paths (e.g., set_qos, firewall/ACL, VPN and OpenVPN related commands) tha...