CVE-2023-25122: Buffer Overflow
Multiple buffer overflow vulnerabilities exist in the vtyshubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to trigger these vulnerabilities.This buffer overflow occurs in the setopenvpnclient function with the oldremotesubnet and the oldremotemask variables.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID of this issue?
The vulnerability ID of this issue is CVE-2023-25122.
What is the severity of CVE-2023-25122?
The severity of CVE-2023-25122 is high with a severity value of 7.2.
What software is affected by CVE-2023-25122?
Milesight UR32L firmware version 32.3.0.5 is affected by CVE-2023-25122.
How does CVE-2023-25122 work?
CVE-2023-25122 is a buffer overflow vulnerability that exists in the vtysh_ubus binary of Milesight UR32L firmware version 32.3.0.5. It occurs due to the use of an unsafe sprintf pattern, allowing a specially crafted HTTP request to lead to arbitrary code execution.
How can CVE-2023-25122 be exploited?
An attacker with high privileges can send a specially crafted HTTP request to trigger the CVE-2023-25122 vulnerability, leading to arbitrary code execution.