high7.5
CVE-2023-43261
An information disclosure in Milesight UR5X, UR32L, UR32, UR35, UR41 before v35.3.0.7 allows attackers to access sensitive router components.
Impact
An information disclosure in Milesight UR5X, UR32L, UR32, UR35, UR41 before v35.3.0.7 allows attackers to access sensitive router components.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Milesight | Ur5x Firmware | before 35.3.0.7 |
| Milesight | Ur32l Firmware | before 35.3.0.7 |
| Milesight | Ur32 Firmware | before 35.3.0.7 |
| Milesight | Ur35 Firmware | before 35.3.0.7 |
| Milesight | Ur41 Firmware | before 35.3.0.7 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/176988/Milesight-UR5X-UR32L-UR32-UR35-UR41-Credential-Leakage.html
- https://github.com/win3zz/CVE-2023-43261
- https://medium.com/@win3zz/inside-the-router-how-i-accessed-industrial-routers-and-reported-the-flaws-29c34213dfdf
- https://support.milesight-iot.com/support/home
- http://packetstormsecurity.com/files/176988/Milesight-UR5X-UR32L-UR32-UR35-UR41-Credential-Leakage.html
- https://github.com/win3zz/CVE-2023-43261
- https://medium.com/%40win3zz/inside-the-router-how-i-accessed-industrial-routers-and-reported-the-flaws-29c34213dfdf
- https://support.milesight-iot.com/support/home