Milesight Ur32l_firmware
66 CVEs affecting Milesight Ur32l_firmware. Latest disclosed: 2024-05-01. Critical: 1, High: 62.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-23902 | Critical | 9.8 | 2023-07-06 | A buffer overflow vulnerability exists in the uhttpd login functionality of Milesight UR32L v32.3.0.5. A specially crafted network request can lead to remote c… |
CVE-2023-47166 | High | 8.8 | 2024-05-01 | A firmware update vulnerability exists in the luci2-io file-import functionality of Milesight UR32L v32.3.0.7-r2. A specially crafted network request can lead… |
CVE-2023-24583 | High | 8.8 | 2023-07-06 | Two OS command injection vulnerabilities exist in the urvpn_client cmd_name_action functionality of Milesight UR32L v32.3.0.5. A specially crafted network requ… |
CVE-2023-24582 | High | 8.8 | 2023-07-06 | Two OS command injection vulnerabilities exist in the urvpn_client cmd_name_action functionality of Milesight UR32L v32.3.0.5. A specially crafted network requ… |
CVE-2023-24520 | High | 8.8 | 2023-07-06 | Two OS command injection vulnerability exist in the vtysh_ubus toolsh_excute.constprop.1 functionality of Milesight UR32L v32.3.0.5. A specially-crafted networ… |
CVE-2023-24519 | High | 8.8 | 2023-07-06 | Two OS command injection vulnerability exist in the vtysh_ubus toolsh_excute.constprop.1 functionality of Milesight UR32L v32.3.0.5. A specially-crafted networ… |
CVE-2023-24018 | High | 8.8 | 2023-07-06 | A stack-based buffer overflow vulnerability exists in the libzebra.so.0.0.0 security_decrypt_password functionality of Milesight UR32L v32.3.0.5. A specially c… |
CVE-2023-22653 | High | 8.8 | 2023-07-06 | An OS command injection vulnerability exists in the vtysh_ubus tcpdump_start_cb functionality of Milesight UR32L v32.3.0.5. A specially crafted HTTP request ca… |
CVE-2023-22299 | High | 8.8 | 2023-07-06 | An OS command injection vulnerability exists in the vtysh_ubus _get_fw_logs functionality of Milesight UR32L v32.3.0.5. A specially crafted network request can… |
CVE-2023-24019 | High | 8.1 | 2023-07-06 | A stack-based buffer overflow vulnerability exists in the urvpn_client http_connection_readcb functionality of Milesight UR32L v32.3.0.5. A specially crafted n… |
CVE-2023-43261 | High | 7.5 | 2023-10-04 | An information disclosure in Milesight UR5X, UR32L, UR32, UR35, UR41 before v35.3.0.7 allows attackers to access sensitive router components. |
CVE-2023-23571 | High | 7.5 | 2023-07-06 | An access violation vulnerability exists in the eventcore functionality of Milesight UR32L v32.3.0.5. A specially crafted network request can lead to denial of… |
CVE-2023-25583 | High | 7.2 | 2023-07-06 | Two OS command injection vulnerabilities exist in the zebra vlan_name functionality of Milesight UR32L v32.3.0.5. A specially crafted network request can lead… |
CVE-2023-25582 | High | 7.2 | 2023-07-06 | Two OS command injection vulnerabilities exist in the zebra vlan_name functionality of Milesight UR32L v32.3.0.5. A specially crafted network request can lead… |
CVE-2023-25124 | High | 7.2 | 2023-07-06 | Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially c… |
CVE-2023-25123 | High | 7.2 | 2023-07-06 | Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially c… |
CVE-2023-25122 | High | 7.2 | 2023-07-06 | Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially c… |
CVE-2023-25121 | High | 7.2 | 2023-07-06 | Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially c… |
CVE-2023-25120 | High | 7.2 | 2023-07-06 | Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially c… |
CVE-2023-25119 | High | 7.2 | 2023-07-06 | Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially c… |