CVEs

130,867 total · page 1507 of 2,618

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2023-25119	Milesight UR32L	Hig	0.47	7.2	0.01	Jul 6, 2023	Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to…
CVE-2023-25118	Milesight UR32L	Hig	0.47	7.2	0.01	Jul 6, 2023	Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to…
CVE-2023-25117	Milesight UR32L	Hig	0.47	7.2	0.01	Jul 6, 2023	Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to…
CVE-2023-25116	Milesight UR32L	Hig	0.47	7.2	0.01	Jul 6, 2023	Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to…
CVE-2023-25115	Milesight UR32L	Hig	0.47	7.2	0.01	Jul 6, 2023	Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to…
CVE-2023-25114	Milesight UR32L	Hig	0.47	7.2	0.01	Jul 6, 2023	Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to…
CVE-2023-25113	Milesight UR32L	Hig	0.47	7.2	0.01	Jul 6, 2023	Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to…
CVE-2023-25112	Milesight UR32L	Hig	0.47	7.2	0.01	Jul 6, 2023	Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to…
CVE-2023-25111	Milesight UR32L	Hig	0.47	7.2	0.01	Jul 6, 2023	Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to…
CVE-2023-25110	Milesight UR32L	Hig	0.47	7.2	0.01	Jul 6, 2023	Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to…
CVE-2023-25109	Milesight UR32L	Hig	0.47	7.2	0.01	Jul 6, 2023	Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to…
CVE-2023-25108	Milesight UR32L	Hig	0.47	7.2	0.01	Jul 6, 2023	Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to…
CVE-2023-25107	Milesight UR32L	Hig	0.47	7.2	0.01	Jul 6, 2023	Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to…
CVE-2023-25106	Milesight UR32L	Hig	0.47	7.2	0.01	Jul 6, 2023	Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to…
CVE-2023-25105	Milesight UR32L	Hig	0.47	7.2	0.01	Jul 6, 2023	Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to…
CVE-2023-25104	Milesight UR32L	Hig	0.47	7.2	0.01	Jul 6, 2023	Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to…
CVE-2023-25103	Milesight UR32L	Hig	0.47	7.2	0.01	Jul 6, 2023	Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to…
CVE-2023-25102	Milesight UR32L	Hig	0.47	7.2	0.01	Jul 6, 2023	Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to…
CVE-2023-25101	Milesight UR32L	Hig	0.47	7.2	0.01	Jul 6, 2023	Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to…
CVE-2023-25100	Milesight UR32L	Hig	0.47	7.2	0.01	Jul 6, 2023	Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to…
CVE-2023-25099	Milesight UR32L	Hig	0.47	7.2	0.01	Jul 6, 2023	Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to…
CVE-2023-25098	Milesight UR32L	Hig	0.47	7.2	0.01	Jul 6, 2023	Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to…
CVE-2023-25097	Milesight UR32L	Hig	0.47	7.2	0.01	Jul 6, 2023	Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to…
CVE-2023-25096	Milesight UR32L	Hig	0.47	7.2	0.01	Jul 6, 2023	Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to…
CVE-2023-25095	Milesight UR32L	Hig	0.47	7.2	0.01	Jul 6, 2023	Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to…
CVE-2023-25094	Milesight UR32L	Hig	0.47	7.2	0.01	Jul 6, 2023	Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to…
CVE-2023-25093	Milesight UR32L	Hig	0.47	7.2	0.01	Jul 6, 2023	Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to…
CVE-2023-25092	Milesight UR32L	Hig	0.47	7.2	0.01	Jul 6, 2023	Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to…
CVE-2023-25091	Milesight UR32L	Hig	0.47	7.2	0.01	Jul 6, 2023	Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to…
CVE-2023-25090	Milesight UR32L	Hig	0.47	7.2	0.01	Jul 6, 2023	Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to…
CVE-2023-25089	Milesight UR32L	Hig	0.47	7.2	0.01	Jul 6, 2023	Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to…
CVE-2023-25088	Milesight UR32L	Hig	0.47	7.2	0.01	Jul 6, 2023	Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to…
CVE-2023-25087	Milesight UR32L	Hig	0.47	7.2	0.01	Jul 6, 2023	Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to…
CVE-2023-25086	Milesight UR32L	Hig	0.47	7.2	0.01	Jul 6, 2023	Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to…
CVE-2023-25085	Milesight UR32L	Hig	0.47	7.2	0.01	Jul 6, 2023	Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to…
CVE-2023-25084	Milesight UR32L	Hig	0.47	7.2	0.01	Jul 6, 2023	Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to…
CVE-2023-25083	Milesight UR32L	Hig	0.47	7.2	0.01	Jul 6, 2023	Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to…
CVE-2023-25082	Milesight UR32L	Hig	0.47	7.2	0.01	Jul 6, 2023	Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to…
CVE-2023-25081	Milesight UR32L	Hig	0.47	7.2	0.01	Jul 6, 2023	Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to…
CVE-2023-24595	Milesight UR32L	Hig	0.47	7.2	0.04	Jul 6, 2023	An OS command injection vulnerability exists in the ys_thirdparty system_user_script functionality of Milesight UR32L v32.3.0.5. A specially crafted series of network requests can lead to command execution. An attacker can send a sequence of requests to trigger this…
CVE-2023-24583	Milesight UR32L	Hig	0.57	8.8	0.03	Jul 6, 2023	Two OS command injection vulnerabilities exist in the urvpn_client cmd_name_action functionality of Milesight UR32L v32.3.0.5. A specially crafted network request can lead to arbitrary command execution. An attacker can send a network request to trigger these…
CVE-2023-24582	Milesight UR32L	Hig	0.57	8.8	0.03	Jul 6, 2023	Two OS command injection vulnerabilities exist in the urvpn_client cmd_name_action functionality of Milesight UR32L v32.3.0.5. A specially crafted network request can lead to arbitrary command execution. An attacker can send a network request to trigger these…
CVE-2023-24520	Milesight UR32L	Hig	0.57	8.8	0.04	Jul 6, 2023	Two OS command injection vulnerability exist in the vtysh_ubus toolsh_excute.constprop.1 functionality of Milesight UR32L v32.3.0.5. A specially-crafted network request can lead to command execution. An attacker can send a network request to trigger these vulnerabilities.This…
CVE-2023-24519	Milesight UR32L	Hig	0.57	8.8	0.04	Jul 6, 2023	Two OS command injection vulnerability exist in the vtysh_ubus toolsh_excute.constprop.1 functionality of Milesight UR32L v32.3.0.5. A specially-crafted network request can lead to command execution. An attacker can send a network request to trigger these vulnerabilities.This…
CVE-2023-24019	Milesight UR32L	Hig	0.53	8.1	0.01	Jul 6, 2023	A stack-based buffer overflow vulnerability exists in the urvpn_client http_connection_readcb functionality of Milesight UR32L v32.3.0.5. A specially crafted network packet can lead to a buffer overflow. An attacker can send a malicious packet to trigger this vulnerability.
CVE-2023-24018	Milesight UR32L	Hig	0.57	8.8	0.01	Jul 6, 2023	A stack-based buffer overflow vulnerability exists in the libzebra.so.0.0.0 security_decrypt_password functionality of Milesight UR32L v32.3.0.5. A specially crafted HTTP request can lead to a buffer overflow. An authenticated attacker can send an HTTP request to trigger this…
CVE-2023-23907	Milesight VPN	Hig	0.49	7.5	0.01	Jul 6, 2023	A directory traversal vulnerability exists in the server.js start functionality of Milesight VPN v2.0.2. A specially-crafted network request can lead to arbitrary file read. An attacker can send a network request to trigger this vulnerability.
CVE-2023-23571	Milesight UR32L	Hig	0.49	7.5	0.01	Jul 6, 2023	An access violation vulnerability exists in the eventcore functionality of Milesight UR32L v32.3.0.5. A specially crafted network request can lead to denial of service. An attacker can send a network request to trigger this vulnerability.
CVE-2023-23550	Milesight UR32L	Hig	0.47	7.2	0.04	Jul 6, 2023	An OS command injection vulnerability exists in the ys_thirdparty user_delete functionality of Milesight UR32L v32.3.0.5. A specially crafted network packet can lead to command execution. An attacker can send a sequence of requests to trigger this vulnerability.
CVE-2023-22844	Milesight VPN	Hig	0.48	7.3	0.01	Jul 6, 2023	An authentication bypass vulnerability exists in the requestHandlers.js verifyToken functionality of Milesight VPN v2.0.2. A specially-crafted network request can lead to authentication bypass. An attacker can send a network request to trigger this vulnerability.

CVE-2023-25119HigJul 6, 2023
Milesight
UR32L
risk 0.47cvss 7.2epss 0.01
Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to…
CVE-2023-25118HigJul 6, 2023
Milesight
UR32L
risk 0.47cvss 7.2epss 0.01
Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to…
CVE-2023-25117HigJul 6, 2023
Milesight
UR32L
risk 0.47cvss 7.2epss 0.01
Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to…
CVE-2023-25116HigJul 6, 2023
Milesight
UR32L
risk 0.47cvss 7.2epss 0.01
Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to…
CVE-2023-25115HigJul 6, 2023
Milesight
UR32L
risk 0.47cvss 7.2epss 0.01
Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to…
CVE-2023-25114HigJul 6, 2023
Milesight
UR32L
risk 0.47cvss 7.2epss 0.01
Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to…
CVE-2023-25113HigJul 6, 2023
Milesight
UR32L
risk 0.47cvss 7.2epss 0.01
Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to…
CVE-2023-25112HigJul 6, 2023
Milesight
UR32L
risk 0.47cvss 7.2epss 0.01
Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to…
CVE-2023-25111HigJul 6, 2023
Milesight
UR32L
risk 0.47cvss 7.2epss 0.01
Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to…
CVE-2023-25110HigJul 6, 2023
Milesight
UR32L
risk 0.47cvss 7.2epss 0.01
Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to…
CVE-2023-25109HigJul 6, 2023
Milesight
UR32L
risk 0.47cvss 7.2epss 0.01
Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to…
CVE-2023-25108HigJul 6, 2023
Milesight
UR32L
risk 0.47cvss 7.2epss 0.01
Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to…
CVE-2023-25107HigJul 6, 2023
Milesight
UR32L
risk 0.47cvss 7.2epss 0.01
Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to…
CVE-2023-25106HigJul 6, 2023
Milesight
UR32L
risk 0.47cvss 7.2epss 0.01
Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to…
CVE-2023-25105HigJul 6, 2023
Milesight
UR32L
risk 0.47cvss 7.2epss 0.01
Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to…
CVE-2023-25104HigJul 6, 2023
Milesight
UR32L
risk 0.47cvss 7.2epss 0.01
Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to…
CVE-2023-25103HigJul 6, 2023
Milesight
UR32L
risk 0.47cvss 7.2epss 0.01
Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to…
CVE-2023-25102HigJul 6, 2023
Milesight
UR32L
risk 0.47cvss 7.2epss 0.01
Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to…
CVE-2023-25101HigJul 6, 2023
Milesight
UR32L
risk 0.47cvss 7.2epss 0.01
Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to…
CVE-2023-25100HigJul 6, 2023
Milesight
UR32L
risk 0.47cvss 7.2epss 0.01
Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to…
CVE-2023-25099HigJul 6, 2023
Milesight
UR32L
risk 0.47cvss 7.2epss 0.01
Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to…
CVE-2023-25098HigJul 6, 2023
Milesight
UR32L
risk 0.47cvss 7.2epss 0.01
Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to…
CVE-2023-25097HigJul 6, 2023
Milesight
UR32L
risk 0.47cvss 7.2epss 0.01
Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to…
CVE-2023-25096HigJul 6, 2023
Milesight
UR32L
risk 0.47cvss 7.2epss 0.01
Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to…
CVE-2023-25095HigJul 6, 2023
Milesight
UR32L
risk 0.47cvss 7.2epss 0.01
Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to…
CVE-2023-25094HigJul 6, 2023
Milesight
UR32L
risk 0.47cvss 7.2epss 0.01
Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to…
CVE-2023-25093HigJul 6, 2023
Milesight
UR32L
risk 0.47cvss 7.2epss 0.01
Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to…
CVE-2023-25092HigJul 6, 2023
Milesight
UR32L
risk 0.47cvss 7.2epss 0.01
Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to…
CVE-2023-25091HigJul 6, 2023
Milesight
UR32L
risk 0.47cvss 7.2epss 0.01
Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to…
CVE-2023-25090HigJul 6, 2023
Milesight
UR32L
risk 0.47cvss 7.2epss 0.01
Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to…
CVE-2023-25089HigJul 6, 2023
Milesight
UR32L
risk 0.47cvss 7.2epss 0.01
Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to…
CVE-2023-25088HigJul 6, 2023
Milesight
UR32L
risk 0.47cvss 7.2epss 0.01
Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to…
CVE-2023-25087HigJul 6, 2023
Milesight
UR32L
risk 0.47cvss 7.2epss 0.01
Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to…
CVE-2023-25086HigJul 6, 2023
Milesight
UR32L
risk 0.47cvss 7.2epss 0.01
Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to…
CVE-2023-25085HigJul 6, 2023
Milesight
UR32L
risk 0.47cvss 7.2epss 0.01
Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to…
CVE-2023-25084HigJul 6, 2023
Milesight
UR32L
risk 0.47cvss 7.2epss 0.01
Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to…
CVE-2023-25083HigJul 6, 2023
Milesight
UR32L
risk 0.47cvss 7.2epss 0.01
Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to…
CVE-2023-25082HigJul 6, 2023
Milesight
UR32L
risk 0.47cvss 7.2epss 0.01
Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to…
CVE-2023-25081HigJul 6, 2023
Milesight
UR32L
risk 0.47cvss 7.2epss 0.01
Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to…
CVE-2023-24595HigJul 6, 2023
Milesight
UR32L
risk 0.47cvss 7.2epss 0.04
An OS command injection vulnerability exists in the ys_thirdparty system_user_script functionality of Milesight UR32L v32.3.0.5. A specially crafted series of network requests can lead to command execution. An attacker can send a sequence of requests to trigger this…
CVE-2023-24583HigJul 6, 2023
Milesight
UR32L
risk 0.57cvss 8.8epss 0.03
Two OS command injection vulnerabilities exist in the urvpn_client cmd_name_action functionality of Milesight UR32L v32.3.0.5. A specially crafted network request can lead to arbitrary command execution. An attacker can send a network request to trigger these…
CVE-2023-24582HigJul 6, 2023
Milesight
UR32L
risk 0.57cvss 8.8epss 0.03
Two OS command injection vulnerabilities exist in the urvpn_client cmd_name_action functionality of Milesight UR32L v32.3.0.5. A specially crafted network request can lead to arbitrary command execution. An attacker can send a network request to trigger these…
CVE-2023-24520HigJul 6, 2023
Milesight
UR32L
risk 0.57cvss 8.8epss 0.04
Two OS command injection vulnerability exist in the vtysh_ubus toolsh_excute.constprop.1 functionality of Milesight UR32L v32.3.0.5. A specially-crafted network request can lead to command execution. An attacker can send a network request to trigger these vulnerabilities.This…
CVE-2023-24519HigJul 6, 2023
Milesight
UR32L
risk 0.57cvss 8.8epss 0.04
Two OS command injection vulnerability exist in the vtysh_ubus toolsh_excute.constprop.1 functionality of Milesight UR32L v32.3.0.5. A specially-crafted network request can lead to command execution. An attacker can send a network request to trigger these vulnerabilities.This…
CVE-2023-24019HigJul 6, 2023
Milesight
UR32L
risk 0.53cvss 8.1epss 0.01
A stack-based buffer overflow vulnerability exists in the urvpn_client http_connection_readcb functionality of Milesight UR32L v32.3.0.5. A specially crafted network packet can lead to a buffer overflow. An attacker can send a malicious packet to trigger this vulnerability.
CVE-2023-24018HigJul 6, 2023
Milesight
UR32L
risk 0.57cvss 8.8epss 0.01
A stack-based buffer overflow vulnerability exists in the libzebra.so.0.0.0 security_decrypt_password functionality of Milesight UR32L v32.3.0.5. A specially crafted HTTP request can lead to a buffer overflow. An authenticated attacker can send an HTTP request to trigger this…
CVE-2023-23907HigJul 6, 2023
Milesight
VPN
risk 0.49cvss 7.5epss 0.01
A directory traversal vulnerability exists in the server.js start functionality of Milesight VPN v2.0.2. A specially-crafted network request can lead to arbitrary file read. An attacker can send a network request to trigger this vulnerability.
CVE-2023-23571HigJul 6, 2023
Milesight
UR32L
risk 0.49cvss 7.5epss 0.01
An access violation vulnerability exists in the eventcore functionality of Milesight UR32L v32.3.0.5. A specially crafted network request can lead to denial of service. An attacker can send a network request to trigger this vulnerability.
CVE-2023-23550HigJul 6, 2023
Milesight
UR32L
risk 0.47cvss 7.2epss 0.04
An OS command injection vulnerability exists in the ys_thirdparty user_delete functionality of Milesight UR32L v32.3.0.5. A specially crafted network packet can lead to command execution. An attacker can send a sequence of requests to trigger this vulnerability.
CVE-2023-22844HigJul 6, 2023
Milesight
VPN
risk 0.48cvss 7.3epss 0.01
An authentication bypass vulnerability exists in the requestHandlers.js verifyToken functionality of Milesight VPN v2.0.2. A specially-crafted network request can lead to authentication bypass. An attacker can send a network request to trigger this vulnerability.