Skip to content
OpenAdvisories
High · 7.2 CVE-2023-22306 EUVD-2023-26469GHSA-m995-m86g-r6r8

An OS command injection vulnerability exists in the libzebra.so bridge_group functionality of Milesight UR32L v32.3.0.5. A specially crafte…

Published Jul 6, 2023 · Updated Nov 14, 2024 · Assigned by talos

Vendor: Milesight Product: UR32L

Description

An OS command injection vulnerability exists in the libzebra.so bridge_group functionality of Milesight UR32L v32.3.0.5. A specially crafted network packet can lead to command execution. An attacker can send a sequence of requests to trigger this vulnerability.

Affected products

VendorProductAffectedFixed
Milesight UR32L v32.3.0.5 —

References