CVE-2023-24019

Name of the Vulnerable Software and Affected Versions Milesight UR32L version 32.3.0.5

Description A stack-based buffer overflow issue exists in the http connection readcb functionality of the urvpn client. This can be triggered by a specially crafted network packet, leading to a buffer overflow. An attacker can exploit this by sending a malicious packet.

Recommendations For Milesight UR32L version 32.3.0.5, consider restricting access to the urvpn client until a patch is available. As a temporary workaround, avoid using the http connection readcb functionality to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.