CVE-2023-43261

CVE-2023-43261 affects Milesight UR5X, UR32L, UR32, UR35, UR41 (pre-35.3.0.7). The issue combines a misconfigured directory listing that exposes log files containing credentials and a hardcoded AES key/IV in JS, enabling access to sensitive router components and passwords. Public PoCs and writeup...

CVE-2023-43260

CVE-2023-43260 affects Milesight UR5X, UR32L, UR32, UR35, UR41 prior to version 35.3.0.7 with an XSS vulnerability exploitable via the admin panel. The vulnerability is documented across multiple feeds (NVD/Red Hat/CVE lists) and is mitigated by upgrading to version 35.3.0.7 or later (per PT-2023...