CVE-2023-23571

Name of the Vulnerable Software and Affected Versions Milesight UR32L version 32.3.0.5

Description An access violation issue exists in the eventcore functionality. A specially crafted network request can lead to denial of service. An attacker can send a network request to trigger this issue.

Recommendations For Milesight UR32L version 32.3.0.5, consider restricting access to the eventcore functionality until a patch is available. As a temporary workaround, avoid using the eventcore functionality to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.