CVE-2023-23547

Name of the Vulnerable Software and Affected Versions Milesight UR32L version 32.3.0.5

Description A directory traversal issue exists in the luci2-io file-export mib functionality. This allows an attacker to send a specially crafted network request, potentially leading to arbitrary file read.

Recommendations For Milesight UR32L version 32.3.0.5, consider restricting access to the luci2-io file-export mib functionality until a patch is available. As a temporary workaround, disabling the vulnerable functionality may help minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.