CVE-2023-24018
CVSS 3.1 Score 8.8 of 10 (high)
Details
Summary
CVE-2023-24018 is a stack-based buffer overflow vulnerability that affects the libzebra.so.0.0.0 security_decrypt_password functionality of Milesight UR32L v32.3.0.5. This vulnerability can be exploited by an authenticated attacker through a specially crafted HTTP request, leading to a buffer overflow. The vulnerability has a base severity rating of HIGH with a base score of 8.8 according to the CVSS:3.1 scoring system, indicating a significant threat to organizations. The potential impacts include high confidentiality and integrity impacts, as well as low privileges required and no user interaction needed for exploitation. It is recommended to apply appropriate patches or updates provided by the vendor to remediate this vulnerability and mitigate the potential danger it poses.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions