TI-2023-09701 CVE-2023-23902 · GHSA-qpc6-5f38-pmpq
Stack-based buffer overflow in Milesight UR32L
Priority HIGH 82
A buffer overflow vulnerability exists in the uhttpd login functionality of Milesight UR32L v32.3.0.5.
Milesight
Records96All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical16CVSS 9.0–10.0
CVSS high74CVSS 7.0–8.9
Exploited now
Milesight records in CISA KEVNo Milesight vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
96 records
TI-2023-08998 CVE-2023-22844 · GHSA-pxr7-xfv3-mwhv
An authentication bypass vulnerability exists in the requestHandlers.js verifyToken…
Priority HIGH 81
An authentication bypass vulnerability exists in the requestHandlers.js verifyToken functionality of Milesight VPN v2.0.2.
TI-2023-08584 CVE-2023-22319 · GHSA-m5cf-882p-58vh
SQL injection in MilesightVPN
Priority HIGH 81
A sql injection vulnerability exists in the requestHandlers.js LoginAuth functionality of Milesight VPN v2.0.2.
TI-2023-23160 CVE-2023-43261 · GHSA-3r5f-38cp-r8x3
An information disclosure in Milesight UR5X, UR32L, UR32, UR35, UR41 before v35.3.0.7…
Priority HIGH 74
An information disclosure in Milesight UR5X, UR32L, UR32, UR35, UR41 before v35.3.0.7 allows attackers to access sensitive router components.
TI-2023-10201 CVE-2023-24583 · GHSA-8f98-c4vq-hwx4
Command injection in Milesight UR32L
Priority HIGH 73
Two OS command injection vulnerabilities exist in the urvpn_client cmd_name_action functionality of Milesight UR32L v32.3.0.5.
TI-2023-10200 CVE-2023-24582 · GHSA-xwcm-x564-9rvc
Command injection in Milesight UR32L
Priority HIGH 73
Two OS command injection vulnerabilities exist in the urvpn_client cmd_name_action functionality of Milesight UR32L v32.3.0.5.
TI-2023-10141 CVE-2023-24520 · GHSA-cw67-28xm-vv9x
Command injection in Milesight UR32L
Priority HIGH 73
Two OS command injection vulnerability exist in the vtysh_ubus toolsh_excute.constprop.1 functionality of Milesight UR32L v32.3.0.5.
TI-2023-10140 CVE-2023-24519 · GHSA-jxf3-65pg-9w52
Command injection in Milesight UR32L
Priority HIGH 73
Two OS command injection vulnerability exist in the vtysh_ubus toolsh_excute.constprop.1 functionality of Milesight UR32L v32.3.0.5.
TI-2023-09803 CVE-2023-24018 · GHSA-w3gc-whgg-2cmr
Stack-based buffer overflow in Milesight UR32L
Priority HIGH 73
A stack-based buffer overflow vulnerability exists in the libzebra.so.0.0.0 security_decrypt_password functionality of Milesight UR32L v32.3.0.5.
TI-2023-08564 CVE-2023-22299 · GHSA-c524-9cv5-wppq
OS command injection in Milesight UR32L
Priority HIGH 73
An OS command injection vulnerability exists in the vtysh_ubus _get_fw_logs functionality of Milesight UR32L v32.3.0.5.
TI-2023-09402 CVE-2023-23571 · GHSA-hcp4-644r-q8xr
An access violation vulnerability exists in the eventcore functionality of Milesight…
Priority HIGH 72
An access violation vulnerability exists in the eventcore functionality of Milesight UR32L v32.3.0.5.
TI-2023-09804 CVE-2023-24019 · GHSA-w7hv-vwx2-mqmg
Buffer overflow in Milesight UR32L
Priority HIGH 70
A stack-based buffer overflow vulnerability exists in the urvpn_client http_connection_readcb functionality of Milesight UR32L v32.3.0.5.
TI-2023-08631 CVE-2023-22371 · GHSA-x4wh-ccmq-r3hv
Command injection in MilesightVPN
Priority HIGH 70
An os command injection vulnerability exists in the liburvpn.so create_private_key functionality of Milesight VPN v2.0.2.
TI-2023-10885 CVE-2023-25583 · GHSA-gff2-f32j-9q8v
OS command injection in Milesight UR32L
Priority HIGH 67
Two OS command injection vulnerabilities exist in the zebra vlan_name functionality of Milesight UR32L v32.3.0.5.
TI-2023-10884 CVE-2023-25582 · GHSA-8h2v-m9wg-645r
OS command injection in Milesight UR32L
Priority HIGH 67
Two OS command injection vulnerabilities exist in the zebra vlan_name functionality of Milesight UR32L v32.3.0.5.
TI-2023-10595 CVE-2023-25124 · GHSA-6xrm-qmh2-p8gf
Stack-based buffer overflow in Milesight UR32L
Priority HIGH 67
Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern.
TI-2023-10594 CVE-2023-25123 · GHSA-78gw-vjgg-gvx5
Stack-based buffer overflow in Milesight UR32L
Priority HIGH 67
Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern.
TI-2023-10593 CVE-2023-25122 · GHSA-689c-7h72-pfpf
Stack-based buffer overflow in Milesight UR32L
Priority HIGH 67
Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern.
TI-2023-10592 CVE-2023-25121 · GHSA-p4wp-m87q-2hxm
Stack-based buffer overflow in Milesight UR32L
Priority HIGH 67
Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern.
TI-2023-10591 CVE-2023-25120 · GHSA-fx83-22h6-wqxv
Stack-based buffer overflow in Milesight UR32L
Priority HIGH 67
Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern.
TI-2023-10590 CVE-2023-25119 · GHSA-rj65-9vh3-496v
Stack-based buffer overflow in Milesight UR32L
Priority HIGH 67
Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern.
TI-2023-10589 CVE-2023-25118 · GHSA-8822-mhvg-p8mv
Stack-based buffer overflow in Milesight UR32L
Priority HIGH 67
Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern.
TI-2023-10588 CVE-2023-25117 · GHSA-wxhc-x55g-5fxf
Stack-based buffer overflow in Milesight UR32L
Priority HIGH 67
Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern.
TI-2023-10587 CVE-2023-25116 · GHSA-f274-chr9-w5r3
Stack-based buffer overflow in Milesight UR32L
Priority HIGH 67
Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern.
TI-2023-10586 CVE-2023-25115 · GHSA-97wg-x9ff-p7gc
Stack-based buffer overflow in Milesight UR32L
Priority HIGH 67
Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern.