milesight Vulnerability Advisory Catalog

Total 89 security vulnerabilities recorded for milesight software and firmware.

← Back to All Vendors
Component: ur32l_firmware

Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A sp...

📅 2023-07-06
CVSS 7.2 Dossier →
Component: ur32l_firmware

Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A sp...

📅 2023-07-06
CVSS 7.2 Dossier →
Component: ur32l_firmware

Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A sp...

📅 2023-07-06
CVSS 7.2 Dossier →
Component: ur32l_firmware

Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A sp...

📅 2023-07-06
CVSS 7.2 Dossier →
Component: ur32l_firmware

Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A sp...

📅 2023-07-06
CVSS 7.2 Dossier →
Component: ur32l_firmware

Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A sp...

📅 2023-07-06
CVSS 7.2 Dossier →
Component: ur32l_firmware

Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A sp...

📅 2023-07-06
CVSS 7.2 Dossier →
Component: ur32l_firmware

Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A sp...

📅 2023-07-06
CVSS 7.2 Dossier →
Component: ur32l_firmware

An OS command injection vulnerability exists in the ys_thirdparty system_user_script functionality of Milesight UR32L v32.3.0.5. A specially crafted s...

📅 2023-07-06
CVSS 7.2 Dossier →
Component: ur32l_firmware

Two OS command injection vulnerabilities exist in the urvpn_client cmd_name_action functionality of Milesight UR32L v32.3.0.5. A specially crafted net...

📅 2023-07-06
CVSS 8.8 Dossier →
Component: ur32l_firmware

Two OS command injection vulnerabilities exist in the urvpn_client cmd_name_action functionality of Milesight UR32L v32.3.0.5. A specially crafted net...

📅 2023-07-06
CVSS 8.8 Dossier →
Component: ur32l_firmware

Two OS command injection vulnerability exist in the vtysh_ubus toolsh_excute.constprop.1 functionality of Milesight UR32L v32.3.0.5. A specially-craft...

📅 2023-07-06
CVSS 8.8 Dossier →
Component: ur32l_firmware

Two OS command injection vulnerability exist in the vtysh_ubus toolsh_excute.constprop.1 functionality of Milesight UR32L v32.3.0.5. A specially-craft...

📅 2023-07-06
CVSS 8.8 Dossier →
Component: milesightvpn

Cross-site scripting (xss) vulnerabilities exist in the requestHandlers.js detail_device functionality of Milesight VPN v2.0.2. A specially-crafted HT...

📅 2023-07-06
CVSS 4.7 Dossier →
Component: ur32l_firmware

A stack-based buffer overflow vulnerability exists in the urvpn_client http_connection_readcb functionality of Milesight UR32L v32.3.0.5. A specially ...

📅 2023-07-06
CVSS 8.1 Dossier →
Component: ur32l_firmware

A stack-based buffer overflow vulnerability exists in the libzebra.so.0.0.0 security_decrypt_password functionality of Milesight UR32L v32.3.0.5. A sp...

📅 2023-07-06
CVSS 8.8 Dossier →
Component: milesightvpn

A directory traversal vulnerability exists in the server.js start functionality of Milesight VPN v2.0.2. A specially-crafted network request can lead ...

📅 2023-07-06
CVSS 7.5 Dossier →
CVE-2023-23902 CRITICAL
Component: ur32l_firmware

A buffer overflow vulnerability exists in the uhttpd login functionality of Milesight UR32L v32.3.0.5. A specially crafted network request can lead to...

📅 2023-07-06
CVSS 9.8 Dossier →
Component: ur32l_firmware

An access violation vulnerability exists in the eventcore functionality of Milesight UR32L v32.3.0.5. A specially crafted network request can lead to ...

📅 2023-07-06
CVSS 7.5 Dossier →
Component: ur32l_firmware

An OS command injection vulnerability exists in the ys_thirdparty user_delete functionality of Milesight UR32L v32.3.0.5. A specially crafted network ...

📅 2023-07-06
CVSS 7.2 Dossier →
Component: ur32l_firmware

A directory traversal vulnerability exists in the luci2-io file-export mib functionality of Milesight UR32L v32.3.0.5. A specially crafted network req...

📅 2023-07-06
CVSS 6.5 Dossier →
Component: ur32l_firmware

A misconfiguration vulnerability exists in the urvpn_client functionality of Milesight UR32L v32.3.0.5. A specially-crafted man-in-the-middle attack c...

📅 2023-07-06
CVSS 4.2 Dossier →
Component: milesightvpn

An authentication bypass vulnerability exists in the requestHandlers.js verifyToken functionality of Milesight VPN v2.0.2. A specially-crafted network...

📅 2023-07-06
CVSS 7.3 Dossier →
Component: ur32l_firmware

An os command injection vulnerability exists in the libzebra.so change_hostname functionality of Milesight UR32L v32.3.0.5. A specially-crafted networ...

📅 2023-07-06
CVSS 7.2 Dossier →
Page 3 of 4 (89 Total Records)