Skip to content
OpenAdvisories
Critical · 9.8 CVE-2023-23902 EUVD-2023-27985GHSA-qpc6-5f38-pmpq

A buffer overflow vulnerability exists in the uhttpd login functionality of Milesight UR32L v32.3.0.5. A specially crafted network request …

Published Jul 6, 2023 · Updated Nov 14, 2024 · Assigned by talos

Description

A buffer overflow vulnerability exists in the uhttpd login functionality of Milesight UR32L v32.3.0.5. A specially crafted network request can lead to remote code execution. An attacker can send a network request to trigger this vulnerability.

Affected products

VendorProductAffectedFixed
Milesight UR32L v32.3.0.5 —

References