CVE-2023-25097

Summary

CVE-2023-25097: A series of buffer overflow vulnerabilities have been discovered in the vtysh_ubus binary of Milesight UR32L v32.3.0.5. These vulnerabilities arise due to an unsafe usage of sprintf. A skilled adversary can exploit these flaws by crafting a malicious HTTP request, leading to arbitrary code execution. The affected function is set_qos, specifically the attach_class variable.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.