Buffer Overflow Vulnerabilities in Milesight UR32L Product

CVE-2023-25086

What is CVE-2023-25086?

Multiple buffer overflow vulnerabilities exist within the vtysh_ubus binary of the Milesight UR32L product due to the improper use of a risky sprintf pattern. An attacker with elevated privileges could exploit this flaw by crafting an HTTP request that triggers arbitrary code execution. Specifically, the vulnerability arises in the firewall_handler_set function, where the index and dport variables are mishandled, potentially allowing unauthorized access and execution of malicious code.

References