CVE-2023-23546

Name of the Vulnerable Software and Affected Versions Milesight UR32L version 32.3.0.5

Description A misconfiguration issue exists in the urvpn client functionality, allowing a specially-crafted man-in-the-middle attack to lead to increased privileges. An attacker can exploit this by performing a man-in-the-middle attack.

Recommendations For Milesight UR32L version 32.3.0.5, consider restricting access to the urvpn client functionality until a fix is available. As a temporary workaround, implement additional security measures to detect and prevent man-in-the-middle attacks.