Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
MilesightUr32l

10 matches found

CVE
CVE•added 2024/05/01 4:15 p.m.•47 views

CVE-2023-47166

A firmware update vulnerability exists in the luci2-io file-import functionality of Milesight UR32L v32.3.0.7-r2. A specially crafted network request can lead to arbitrary firmware update. An attacker can send a network request to trigger this vulnerability.

8.8CVSS6.8AI score0.00127EPSS
CVE
CVE•added 2023/07/06 3:15 p.m.•46 views

CVE-2023-22653

An OS command injection vulnerability exists in the vtysh_ubus tcpdump_start_cb functionality of Milesight UR32L v32.3.0.5. A specially crafted HTTP request can lead to command execution. An authenticated attacker can send an HTTP request to trigger this vulnerability.

8.8CVSS9.1AI score0.01026EPSS
CVE
CVE•added 2023/07/06 3:15 p.m.•42 views

CVE-2023-24019

A stack-based buffer overflow vulnerability exists in the urvpn_client http_connection_readcb functionality of Milesight UR32L v32.3.0.5. A specially crafted network packet can lead to a buffer overflow. An attacker can send a malicious packet to trigger this vulnerability.

8.1CVSS8.5AI score0.00075EPSS
CVE
CVE•added 2023/07/06 3:15 p.m.•33 views

CVE-2023-24583

Two OS command injection vulnerabilities exist in the urvpn_client cmd_name_action functionality of Milesight UR32L v32.3.0.5. A specially crafted network request can lead to arbitrary command execution. An attacker can send a network request to trigger these vulnerabilities.This OS command injecti...

8.8CVSS9.4AI score0.00127EPSS
CVE
CVE•added 2023/07/06 3:15 p.m.•32 views

CVE-2023-24582

Two OS command injection vulnerabilities exist in the urvpn_client cmd_name_action functionality of Milesight UR32L v32.3.0.5. A specially crafted network request can lead to arbitrary command execution. An attacker can send a network request to trigger these vulnerabilities.This OS command injecti...

8.8CVSS9.4AI score0.00127EPSS
CVE
CVE•added 2023/07/06 3:15 p.m.•30 views

CVE-2023-22299

An OS command injection vulnerability exists in the vtysh_ubus _get_fw_logs functionality of Milesight UR32L v32.3.0.5. A specially crafted network request can lead to command execution. An attacker can send a network request to trigger this vulnerability.

8.8CVSS9.1AI score0.00657EPSS
CVE
CVE•added 2023/07/06 3:15 p.m.•30 views

CVE-2023-23546

A misconfiguration vulnerability exists in the urvpn_client functionality of Milesight UR32L v32.3.0.5. A specially-crafted man-in-the-middle attack can lead to increased privileges. An attacker can perform a man-in-the-middle attack to trigger this vulnerability.

8.1CVSS8.2AI score0.00132EPSS
CVE
CVE•added 2023/07/06 3:15 p.m.•30 views

CVE-2023-24520

Two OS command injection vulnerability exist in the vtysh_ubus toolsh_excute.constprop.1 functionality of Milesight UR32L v32.3.0.5. A specially-crafted network request can lead to command execution. An attacker can send a network request to trigger these vulnerabilities.This command injection is i...

8.8CVSS9.2AI score0.00385EPSS
CVE
CVE•added 2023/07/06 3:15 p.m.•29 views

CVE-2023-24519

Two OS command injection vulnerability exist in the vtysh_ubus toolsh_excute.constprop.1 functionality of Milesight UR32L v32.3.0.5. A specially-crafted network request can lead to command execution. An attacker can send a network request to trigger these vulnerabilities.This command injection is i...

8.8CVSS9.2AI score0.00385EPSS
CVE
CVE•added 2023/07/06 3:15 p.m.•25 views

CVE-2023-24018

A stack-based buffer overflow vulnerability exists in the libzebra.so.0.0.0 security_decrypt_password functionality of Milesight UR32L v32.3.0.5. A specially crafted HTTP request can lead to a buffer overflow. An authenticated attacker can send an HTTP request to trigger this vulnerability.

8.8CVSS9AI score0.00143EPSS