Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to trigger these vulnerabilities.This buffer overflow occurs in the set_dmvpn function with the gre_ip and the gre_mask variables.
References
Link | Resource |
---|---|
https://talosintelligence.com/vulnerability_reports/TALOS-2023-1716 | Exploit Third Party Advisory |
Configurations
Configuration 1 (hide)
AND |
|
History
02 Aug 2023, 15:27
Type | Values Removed | Values Added |
---|---|---|
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.2 |
CWE | CWE-787 |
17 Jul 2023, 20:15
Type | Values Removed | Values Added |
---|---|---|
Summary | Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to trigger these vulnerabilities.This buffer overflow occurs in the set_dmvpn function with the gre_ip and the gre_mask variables. |
11 Jul 2023, 15:57
Type | Values Removed | Values Added |
---|---|---|
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
References | (MISC) https://talosintelligence.com/vulnerability_reports/TALOS-2023-1716 - Exploit, Third Party Advisory | |
First Time |
Milesight ur32l
Milesight ur32l Firmware Milesight |
|
CPE | cpe:2.3:o:milesight:ur32l_firmware:32.3.0.5:*:*:*:*:*:*:* cpe:2.3:h:milesight:ur32l:-:*:*:*:*:*:*:* |
06 Jul 2023, 18:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
06 Jul 2023, 17:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
06 Jul 2023, 15:16
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2023-07-06 15:15
Updated : 2024-02-28 20:13
NVD link : CVE-2023-25103
Mitre link : CVE-2023-25103
CVE.ORG link : CVE-2023-25103
JSON object : View
Products Affected
milesight
- ur32l
- ur32l_firmware