CVE-2023-25124

CVE-2023-25124

Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to a buffer overflow. An attacker can send HTTP requests to trigger these vulnerabilities.This buffer overflow occurs in the set_openvpn_client function with the remote_subnet and the remote_mask variables.

Source: CVE-2023-25124

답글 남기기

이메일 주소는 공개되지 않습니다. 필수 필드는 *로 표시됩니다