CVE-2023-25120: Buffer Overflow
Multiple buffer overflow vulnerabilities exist in the vtyshubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to trigger these vulnerabilities.This buffer overflow occurs in the setdmvpn function with the ciscosecret variable.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2023-25120?
CVE-2023-25120 is a vulnerability that allows an attacker to execute arbitrary code by exploiting multiple buffer overflow vulnerabilities in the vtysh_ubus binary of Milesight UR32L v32.3.0.5.
How severe is CVE-2023-25120?
CVE-2023-25120 has a severity rating of 7.2 (high).
What software versions are affected by CVE-2023-25120?
Versions of Milesight UR32L firmware up to and including v32.3.0.5 are affected by CVE-2023-25120.
How can an attacker exploit CVE-2023-25120?
An attacker with high privileges can exploit CVE-2023-25120 by sending a specially crafted HTTP request to trigger the buffer overflow vulnerabilities in the vtysh_ubus binary.
Is Milesight UR32L vulnerable to CVE-2023-25120?
No, Milesight UR32L itself is not vulnerable to CVE-2023-25120, only its firmware version up to and including v32.3.0.5.