CVE-2023-24519

Summary

CVE-2023-24519 refers to two OS command injection vulnerabilities discovered in the vtysh_ubus toolsh_excute.constprop.1 functionality of Milesight UR32L v32.3.0.5. An attacker can exploit these vulnerabilities by sending a specially-crafted network request, leading to command execution. Notably, these vulnerabilities affect the ping tool utility within the system. Successful exploitation could result in unauthorized system access or data theft. Users are advised to update their Milesight UR32L firmware as soon as possible to mitigate these risks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.