Milesight Ur32l Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Milesight Ur32l Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (66)

• CVE-2023-23902 — CVSS 9.8 (critical): A buffer overflow vulnerability exists in the uhttpd login functionality of Milesight UR32L v32.3.0.5. A specially crafted network request…
• CVE-2023-22653 — CVSS 8.8 (high): An OS command injection vulnerability exists in the vtysh_ubus tcpdump_start_cb functionality of Milesight UR32L v32.3.0.5. A specially…
• CVE-2023-24582 — CVSS 8.8 (high): Two OS command injection vulnerabilities exist in the urvpn_client cmd_name_action functionality of Milesight UR32L v32.3.0.5. A specially…
• CVE-2023-24583 — CVSS 8.8 (high): Two OS command injection vulnerabilities exist in the urvpn_client cmd_name_action functionality of Milesight UR32L v32.3.0.5. A specially…
• CVE-2023-47166 — CVSS 8.8 (high): A firmware update vulnerability exists in the luci2-io file-import functionality of Milesight UR32L v32.3.0.7-r2. A specially crafted…
• CVE-2023-24018 — CVSS 8.8 (high): A stack-based buffer overflow vulnerability exists in the libzebra.so.0.0.0 security_decrypt_password functionality of Milesight UR32L…
• CVE-2023-24519 — CVSS 8.8 (high): Two OS command injection vulnerability exist in the vtysh_ubus toolsh_excute.constprop.1 functionality of Milesight UR32L v32.3.0.5. A…
• CVE-2023-22299 — CVSS 8.8 (high): An OS command injection vulnerability exists in the vtysh_ubus _get_fw_logs functionality of Milesight UR32L v32.3.0.5. A specially crafted…
• CVE-2023-24520 — CVSS 8.8 (high): Two OS command injection vulnerability exist in the vtysh_ubus toolsh_excute.constprop.1 functionality of Milesight UR32L v32.3.0.5. A…
• CVE-2023-24019 — CVSS 8.1 (high): A stack-based buffer overflow vulnerability exists in the urvpn_client http_connection_readcb functionality of Milesight UR32L v32.3.0.5. A…
• CVE-2023-23571 — CVSS 7.5 (high): An access violation vulnerability exists in the eventcore functionality of Milesight UR32L v32.3.0.5. A specially crafted network request…
• CVE-2023-43261 — CVSS 7.5 (high): An information disclosure in Milesight UR5X, UR32L, UR32, UR35, UR41 before v35.3.0.7 allows attackers to access sensitive router…
• CVE-2023-25087 — CVSS 7.2 (high): Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf…
• CVE-2023-25088 — CVSS 7.2 (high): Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf…
• CVE-2023-25089 — CVSS 7.2 (high): Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf…
• CVE-2023-25090 — CVSS 7.2 (high): Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf…
• CVE-2023-25091 — CVSS 7.2 (high): Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf…
• CVE-2023-25092 — CVSS 7.2 (high): Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf…
• CVE-2023-25093 — CVSS 7.2 (high): Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf…
• CVE-2023-25094 — CVSS 7.2 (high): Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf…
• CVE-2023-25095 — CVSS 7.2 (high): Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf…
• CVE-2023-25096 — CVSS 7.2 (high): Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf…
• CVE-2023-25097 — CVSS 7.2 (high): Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf…
• CVE-2023-25098 — CVSS 7.2 (high): Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf…
• CVE-2023-25099 — CVSS 7.2 (high): Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf…
• CVE-2023-25100 — CVSS 7.2 (high): Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf…
• CVE-2023-25101 — CVSS 7.2 (high): Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf…
• CVE-2023-25102 — CVSS 7.2 (high): Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf…
• CVE-2023-25103 — CVSS 7.2 (high): Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf…
• CVE-2023-25104 — CVSS 7.2 (high): Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf…
• CVE-2023-25105 — CVSS 7.2 (high): Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf…
• CVE-2023-25106 — CVSS 7.2 (high): Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf…
• CVE-2023-25107 — CVSS 7.2 (high): Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf…
• CVE-2023-25108 — CVSS 7.2 (high): Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf…
• CVE-2023-25109 — CVSS 7.2 (high): Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf…
• CVE-2023-25110 — CVSS 7.2 (high): Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf…
• CVE-2023-25111 — CVSS 7.2 (high): Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf…
• CVE-2023-25112 — CVSS 7.2 (high): Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf…
• CVE-2023-25113 — CVSS 7.2 (high): Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf…
• CVE-2023-25114 — CVSS 7.2 (high): Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf…
• CVE-2023-25115 — CVSS 7.2 (high): Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf…
• CVE-2023-25116 — CVSS 7.2 (high): Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf…
• CVE-2023-25117 — CVSS 7.2 (high): Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf…
• CVE-2023-25118 — CVSS 7.2 (high): Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf…
• CVE-2023-25119 — CVSS 7.2 (high): Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf…
• CVE-2023-25120 — CVSS 7.2 (high): Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf…
• CVE-2023-25122 — CVSS 7.2 (high): Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf…
• CVE-2023-25123 — CVSS 7.2 (high): Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf…
• CVE-2023-25124 — CVSS 7.2 (high): Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf…
• CVE-2023-25582 — CVSS 7.2 (high): Two OS command injection vulnerabilities exist in the zebra vlan_name functionality of Milesight UR32L v32.3.0.5. A specially crafted…
• CVE-2023-25583 — CVSS 7.2 (high): Two OS command injection vulnerabilities exist in the zebra vlan_name functionality of Milesight UR32L v32.3.0.5. A specially crafted…
• CVE-2023-25121 — CVSS 7.2 (high): Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf…
• CVE-2023-22306 — CVSS 7.2 (high): An OS command injection vulnerability exists in the libzebra.so bridge_group functionality of Milesight UR32L v32.3.0.5. A specially…
• CVE-2023-22365 — CVSS 7.2 (high): An OS command injection vulnerability exists in the ys_thirdparty check_system_user functionality of Milesight UR32L v32.3.0.5. A specially…
• CVE-2023-22659 — CVSS 7.2 (high): An os command injection vulnerability exists in the libzebra.so change_hostname functionality of Milesight UR32L v32.3.0.5. A…
• CVE-2023-23550 — CVSS 7.2 (high): An OS command injection vulnerability exists in the ys_thirdparty user_delete functionality of Milesight UR32L v32.3.0.5. A specially…
• CVE-2023-24595 — CVSS 7.2 (high): An OS command injection vulnerability exists in the ys_thirdparty system_user_script functionality of Milesight UR32L v32.3.0.5. A…
• CVE-2023-25081 — CVSS 7.2 (high): Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf…
• CVE-2023-25082 — CVSS 7.2 (high): Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf…
• CVE-2023-25083 — CVSS 7.2 (high): Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf…
• CVE-2023-25084 — CVSS 7.2 (high): Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf…
• CVE-2023-25085 — CVSS 7.2 (high): Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf…
• CVE-2023-25086 — CVSS 7.2 (high): Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf…
• CVE-2023-23547 — CVSS 6.5 (medium): A directory traversal vulnerability exists in the luci2-io file-export mib functionality of Milesight UR32L v32.3.0.5. A specially crafted…
• CVE-2023-43260 — CVSS 6.1 (medium): Milesight UR5X, UR32L, UR32, UR35, UR41 before v35.3.0.7 was discovered to contain a cross-site scripting (XSS) vulnerability via the admin…
• CVE-2023-23546 — CVSS 4.2 (medium): A misconfiguration vulnerability exists in the urvpn_client functionality of Milesight UR32L v32.3.0.5. A specially-crafted…