Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to trigger these vulnerabilities.This buffer overflow occurs in the set_openvpn_client function with the expert_options variable.
History

Thu, 14 Nov 2024 15:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'total'}, 'version': '2.0.3'}


cve-icon MITRE

Status: PUBLISHED

Assigner: talos

Published: 2023-07-06T14:53:26.242Z

Updated: 2024-11-14T14:52:49.904Z

Reserved: 2023-02-02T20:42:36.074Z

Link: CVE-2023-25114

cve-icon Vulnrichment

Updated: 2024-08-02T11:18:35.466Z

cve-icon NVD

Status : Modified

Published: 2023-07-06T15:15:14.817

Modified: 2024-11-21T07:49:08.640

Link: CVE-2023-25114

cve-icon Redhat

No data.