Multiple Buffer Overflow Vulnerabilities in Milesight UR32L Firewall Handler

CVE-2023-25087

What is CVE-2023-25087?

Multiple buffer overflow vulnerabilities affect the vtysh_ubus binary in the Milesight UR32L version 32.3.0.5. These vulnerabilities arise from using an unsafe sprintf pattern, which allows a specially crafted HTTP request to trigger arbitrary code execution. An attacker with sufficient privileges can exploit these vulnerabilities by sending malicious HTTP requests that target the firewall_handler_set function, specifically with the index and to_dport variables. Proper mitigation measures should be taken to safeguard against such attacks to protect the integrity of the affected system.

References