CVE-2023-25118: Buffer Overflow
Multiple buffer overflow vulnerabilities exist in the vtyshubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to trigger these vulnerabilities.This buffer overflow occurs in the setopenvpnclient function with the username and the password variables.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2023-25118?
CVE-2023-25118 refers to multiple buffer overflow vulnerabilities in the vtysh_ubus binary of Milesight UR32L v32.3.0.5.
What is the severity of CVE-2023-25118?
The severity of CVE-2023-25118 is high, with a CVSS score of 7.2.
How do I fix CVE-2023-25118?
To fix CVE-2023-25118, apply the latest firmware update for Milesight UR32L to address the buffer overflow vulnerabilities.
What can an attacker do with CVE-2023-25118?
An attacker with high privileges can send a specially crafted HTTP request to trigger the buffer overflow vulnerabilities in vtysh_ubus and potentially execute arbitrary code.
Is Milesight UR32L vulnerable to CVE-2023-25118?
Yes, Milesight UR32L v32.3.0.5 is affected by CVE-2023-25118.