Read the docs

Milesight

Records96All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical16CVSS 9.0–10.0
CVSS high74CVSS 7.0–8.9

Exploited now

Milesight records in CISA KEV

No Milesight vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

66 records in Ur32l Firmware · all components

Priority HIGH 82

A buffer overflow vulnerability exists in the uhttpd login functionality of Milesight UR32L v32.3.0.5.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02212 Published 2023-07-06 No fix listed CWE-121
TI-2023-10201 CVE-2023-24583 · GHSA-8f98-c4vq-hwx4

Command injection in Milesight UR32L

Priority HIGH 73

Two OS command injection vulnerabilities exist in the urvpn_client cmd_name_action functionality of Milesight UR32L v32.3.0.5.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.03003 Published 2023-07-06 No fix listed CWE-77
TI-2023-10200 CVE-2023-24582 · GHSA-xwcm-x564-9rvc

Command injection in Milesight UR32L

Priority HIGH 73

Two OS command injection vulnerabilities exist in the urvpn_client cmd_name_action functionality of Milesight UR32L v32.3.0.5.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.03028 Published 2023-07-06 No fix listed CWE-77
TI-2023-10141 CVE-2023-24520 · GHSA-cw67-28xm-vv9x

Command injection in Milesight UR32L

Priority HIGH 73

Two OS command injection vulnerability exist in the vtysh_ubus toolsh_excute.constprop.1 functionality of Milesight UR32L v32.3.0.5.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.036 Published 2023-07-06 No fix listed CWE-77
TI-2023-10140 CVE-2023-24519 · GHSA-jxf3-65pg-9w52

Command injection in Milesight UR32L

Priority HIGH 73

Two OS command injection vulnerability exist in the vtysh_ubus toolsh_excute.constprop.1 functionality of Milesight UR32L v32.3.0.5.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.036 Published 2023-07-06 No fix listed CWE-77
Priority HIGH 73

A stack-based buffer overflow vulnerability exists in the libzebra.so.0.0.0 security_decrypt_password functionality of Milesight UR32L v32.3.0.5.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0148 Published 2023-07-06 No fix listed CWE-121
TI-2023-08564 CVE-2023-22299 · GHSA-c524-9cv5-wppq

OS command injection in Milesight UR32L

Priority HIGH 73

An OS command injection vulnerability exists in the vtysh_ubus _get_fw_logs functionality of Milesight UR32L v32.3.0.5.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.03634 Published 2023-07-06 No fix listed CWE-78
TI-2023-09804 CVE-2023-24019 · GHSA-w7hv-vwx2-mqmg

Buffer overflow in Milesight UR32L

Priority HIGH 70

A stack-based buffer overflow vulnerability exists in the urvpn_client http_connection_readcb functionality of Milesight UR32L v32.3.0.5.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00983 Published 2023-07-06 No fix listed CWE-120
TI-2023-10885 CVE-2023-25583 · GHSA-gff2-f32j-9q8v

OS command injection in Milesight UR32L

Priority HIGH 67

Two OS command injection vulnerabilities exist in the zebra vlan_name functionality of Milesight UR32L v32.3.0.5.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.03543 Published 2023-07-06 No fix listed CWE-78
TI-2023-10884 CVE-2023-25582 · GHSA-8h2v-m9wg-645r

OS command injection in Milesight UR32L

Priority HIGH 67

Two OS command injection vulnerabilities exist in the zebra vlan_name functionality of Milesight UR32L v32.3.0.5.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.03543 Published 2023-07-06 No fix listed CWE-78
Priority HIGH 67

Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01503 Published 2023-07-06 No fix listed CWE-121
Priority HIGH 67

Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0146 Published 2023-07-06 No fix listed CWE-121
Priority HIGH 67

Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0146 Published 2023-07-06 No fix listed CWE-121
Priority HIGH 67

Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0146 Published 2023-07-06 No fix listed CWE-121
Priority HIGH 67

Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0146 Published 2023-07-06 No fix listed CWE-121
Priority HIGH 67

Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0146 Published 2023-07-06 No fix listed CWE-121
Priority HIGH 67

Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0146 Published 2023-07-06 No fix listed CWE-121
Priority HIGH 67

Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0146 Published 2023-07-06 No fix listed CWE-121
Priority HIGH 67

Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0146 Published 2023-07-06 No fix listed CWE-121
Priority HIGH 67

Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0146 Published 2023-07-06 No fix listed CWE-121
Priority HIGH 67

Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0146 Published 2023-07-06 No fix listed CWE-121
Priority HIGH 67

Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0146 Published 2023-07-06 No fix listed CWE-121
Priority HIGH 67

Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0146 Published 2023-07-06 No fix listed CWE-121
Load more
Open these records in search →