CVE-2023-25108

CVE-2023-25108

Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to a buffer overflow. An attacker can send HTTP requests to trigger these vulnerabilities.This buffer overflow occurs in the set_gre function with the remote_ip variable.

Source: CVE-2023-25108

답글 남기기

이메일 주소는 공개되지 않습니다. 필수 필드는 *로 표시됩니다