CVE-2023-25124: Buffer Overflow
First published: Thu Jul 06 2023(Updated: )
Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to trigger these vulnerabilities.This buffer overflow occurs in the set_openvpn_client function with the remote_subnet and the remote_mask variables.
Credit: talos-cna@cisco.com talos-cna@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Milesight Ur32l Firmware | =32.3.0.5 | |
| Milesight UR32L |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the vulnerability ID of this vulnerability?
The vulnerability ID of this vulnerability is CVE-2023-25124.
What is the severity level of CVE-2023-25124?
The severity level of CVE-2023-25124 is high.
What is the affected software of CVE-2023-25124?
The affected software of CVE-2023-25124 is Milesight UR32L v32.3.0.5.
How can an attacker exploit CVE-2023-25124?
An attacker can exploit CVE-2023-25124 by sending a specially crafted HTTP request, which can lead to arbitrary code execution.
Is there a fix available for CVE-2023-25124?
There is no information provided about an available fix for CVE-2023-25124. It is recommended to contact the vendor for further assistance.
- collector/nvd-index
- agent/author
- agent/type
- agent/softwarecombine
- agent/references
- agent/weakness
- agent/description
- collector/nvd-api
- agent/software-canonical-lookup-request
- agent/severity
- agent/first-publish-date
- agent/tags
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/source
- vendor/milesight
- canonical/milesight ur32l firmware
- version/milesight ur32l firmware/32.3.0.5
- canonical/milesight ur32l