CVE-2023-25116: Buffer Overflow
Multiple buffer overflow vulnerabilities exist in the vtyshubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to trigger these vulnerabilities.This buffer overflow occurs in the setopenvpnclient function with the localvirtualip and the remotevirtualip variables.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2023-25116?
CVE-2023-25116 is a vulnerability in the Milesight UR32L v32.3.0.5 firmware that allows for arbitrary code execution through specially crafted HTTP requests.
What software versions are affected by CVE-2023-25116?
Milesight UR32L firmware version 32.3.0.5 is affected by CVE-2023-25116.
How severe is CVE-2023-25116?
CVE-2023-25116 has a severity rating of 7.2 (High).
How can an attacker exploit CVE-2023-25116?
An attacker with high privileges can exploit CVE-2023-25116 by sending specially crafted HTTP requests to the vtysh_ubus binary, leading to arbitrary code execution.
Is Milesight UR32L vulnerable to CVE-2023-25116?
No, Milesight UR32L is not vulnerable to CVE-2023-25116.