Milesight

Ur32l Firmware

66 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.1

CVE-2023-23546

Exploit
  • EPSS 0.1%
  • Veröffentlicht 06.07.2023 15:15:11
  • Zuletzt bearbeitet 21.11.2024 07:46:23

A misconfiguration vulnerability exists in the urvpn_client functionality of Milesight UR32L v32.3.0.5. A specially-crafted man-in-the-middle attack can lead to increased privileges. An attacker can perform a man-in-the-middle attack to trigger this ...

7.2

CVE-2023-22659

Exploit
  • EPSS 0.53%
  • Veröffentlicht 06.07.2023 15:15:11
  • Zuletzt bearbeitet 21.11.2024 07:45:09

An os command injection vulnerability exists in the libzebra.so change_hostname functionality of Milesight UR32L v32.3.0.5. A specially-crafted network packets can lead to command execution. An attacker can send a sequence of requests to trigger this...

8.8

CVE-2023-22653

Exploit
  • EPSS 0.79%
  • Veröffentlicht 06.07.2023 15:15:11
  • Zuletzt bearbeitet 21.11.2024 07:45:08

An OS command injection vulnerability exists in the vtysh_ubus tcpdump_start_cb functionality of Milesight UR32L v32.3.0.5. A specially crafted HTTP request can lead to command execution. An authenticated attacker can send an HTTP request to trigger ...

7.2

CVE-2023-22306

Exploit
  • EPSS 0.21%
  • Veröffentlicht 06.07.2023 15:15:10
  • Zuletzt bearbeitet 21.11.2024 07:44:29

An OS command injection vulnerability exists in the libzebra.so bridge_group functionality of Milesight UR32L v32.3.0.5. A specially crafted network packet can lead to command execution. An attacker can send a sequence of requests to trigger this vul...

7.2

CVE-2023-22365

  • EPSS 0.14%
  • Veröffentlicht 06.07.2023 15:15:10
  • Zuletzt bearbeitet 21.11.2024 07:44:38

An OS command injection vulnerability exists in the ys_thirdparty check_system_user functionality of Milesight UR32L v32.3.0.5. A specially crafted set of network packets can lead to command execution. An attacker can send a network request to trigge...

8.8

CVE-2023-22299

Exploit
  • EPSS 0.5%
  • Veröffentlicht 06.07.2023 15:15:10
  • Zuletzt bearbeitet 21.11.2024 07:44:28

An OS command injection vulnerability exists in the vtysh_ubus _get_fw_logs functionality of Milesight UR32L v32.3.0.5. A specially crafted network request can lead to command execution. An attacker can send a network request to trigger this vulnerab...