Skip to content
OpenAdvisories
Medium · 6.5 CVE-2023-23547 EUVD-2023-27647GHSA-5644-x8wc-2r86

A directory traversal vulnerability exists in the luci2-io file-export mib functionality of Milesight UR32L v32.3.0.5. A specially crafted …

Published Jul 6, 2023 · Updated Oct 24, 2024 · Assigned by talos

Description

A directory traversal vulnerability exists in the luci2-io file-export mib functionality of Milesight UR32L v32.3.0.5. A specially crafted network request can lead to arbitrary file read. An attacker can send a network request to trigger this vulnerability.

Affected products

VendorProductAffectedFixed
Milesight UR32L v32.3.0.5 —

References