CyberSecBulletin

MileSight vulnerabilities

We track 71 vulnerabilities in MileSight products across 60+ products. 71 are rated high or critical, and none are known to be exploited. The most recent was published on August 26, 2026.

71vulnerabilities
5critical
66high
0exploited
7.6average CVSS score

Latest MileSight vulnerabilities

  • 7.6 High severity

    AM102/102L V2: Cleartext Transmission of Sensitive Information

    CVE-2026-29988MileSight

    A cleartext transmission of sensitive information vulnerability in the NFC interface of multiple Milesight IoT device models running affected firmware versions allows an unauthenticated attacker with physical proximity to retrieve LoRaWAN ABP NwkSKey and AppSK

  • 8.8 High severity

    UR32L: Missing Authentication for Critical Functionality

    CVE-2023-47166MileSight

    A firmware update vulnerability exists in the luci2-io file-import functionality of Milesight UR32L v32.3.0.7-r2. A specially crafted network request can lead to arbitrary firmware update. An attacker can send a network request to trigger this vulnerability.

  • 7.2 High severity

    UR32L: Improper Neutralization of Special Elements used in an OS Command

    CVE-2023-25583MileSightEPSS 3.54%

    Two OS command injection vulnerabilities exist in the zebra vlan_name functionality of Milesight UR32L v32.3.0.5. A specially crafted network request can lead to command execution. An attacker can send a network request to trigger these vulnerabilities.This co

  • 7.2 High severity

    UR32L: Improper Neutralization of Special Elements used in an OS Command

    CVE-2023-25582MileSightEPSS 3.54%

    Two OS command injection vulnerabilities exist in the zebra vlan_name functionality of Milesight UR32L v32.3.0.5. A specially crafted network request can lead to command execution. An attacker can send a network request to trigger these vulnerabilities.This co

  • 7.2 High severity

    UR32L: Out-of-bounds Write

    CVE-2023-25124MileSightEPSS 1.5%

    Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send H

  • 7.2 High severity

    UR32L: Out-of-bounds Write

    CVE-2023-25123MileSightEPSS 1.46%

    Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send H

  • 7.2 High severity

    UR32L: Out-of-bounds Write

    CVE-2023-25122MileSightEPSS 1.46%

    Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send H

  • 7.2 High severity

    UR32L: Out-of-bounds Write

    CVE-2023-25121MileSightEPSS 1.46%

    Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send H

  • 7.2 High severity

    UR32L: Out-of-bounds Write

    CVE-2023-25120MileSightEPSS 1.46%

    Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send H

  • 7.2 High severity

    UR32L: Out-of-bounds Write

    CVE-2023-25119MileSightEPSS 1.46%

    Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send H

  • 7.2 High severity

    UR32L: Out-of-bounds Write

    CVE-2023-25118MileSightEPSS 1.46%

    Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send H

  • 7.2 High severity

    UR32L: Out-of-bounds Write

    CVE-2023-25117MileSightEPSS 1.46%

    Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send H

  • 7.2 High severity

    UR32L: Out-of-bounds Write

    CVE-2023-25116MileSightEPSS 1.46%

    Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send H

  • 7.2 High severity

    UR32L: Out-of-bounds Write

    CVE-2023-25115MileSightEPSS 1.46%

    Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send H

  • 7.2 High severity

    UR32L: Out-of-bounds Write

    CVE-2023-25114MileSightEPSS 1.46%

    Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send H

  • 7.2 High severity

    UR32L: Out-of-bounds Write

    CVE-2023-25113MileSightEPSS 1.46%

    Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send H

  • 7.2 High severity

    UR32L: Out-of-bounds Write

    CVE-2023-25112MileSightEPSS 1.46%

    Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send H

  • 7.2 High severity

    UR32L: Out-of-bounds Write

    CVE-2023-25111MileSightEPSS 1.46%

    Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send H

  • 7.2 High severity

    UR32L: Out-of-bounds Write

    CVE-2023-25110MileSightEPSS 1.46%

    Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send H

  • 7.2 High severity

    UR32L: Out-of-bounds Write

    CVE-2023-25109MileSightEPSS 1.46%

    Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send H

  • 7.2 High severity

    UR32L: Out-of-bounds Write

    CVE-2023-25108MileSightEPSS 1.46%

    Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send H

  • 7.2 High severity

    UR32L: Out-of-bounds Write

    CVE-2023-25107MileSightEPSS 1.46%

    Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send H

  • 7.2 High severity

    UR32L: Out-of-bounds Write

    CVE-2023-25106MileSightEPSS 1.46%

    Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send H

  • 7.2 High severity

    UR32L: Out-of-bounds Write

    CVE-2023-25105MileSightEPSS 1.46%

    Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send H

  • 7.2 High severity

    UR32L: Out-of-bounds Write

    CVE-2023-25104MileSightEPSS 1.46%

    Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send H

  • 7.2 High severity

    UR32L: Out-of-bounds Write

    CVE-2023-25103MileSightEPSS 1.46%

    Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send H

  • 7.2 High severity

    UR32L: Out-of-bounds Write

    CVE-2023-25102MileSightEPSS 1.46%

    Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send H

  • 7.2 High severity

    UR32L: Out-of-bounds Write

    CVE-2023-25101MileSightEPSS 1.46%

    Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send H

  • 7.2 High severity

    UR32L: Out-of-bounds Write

    CVE-2023-25100MileSightEPSS 1.46%

    Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send H

  • 7.2 High severity

    UR32L: Out-of-bounds Write

    CVE-2023-25099MileSightEPSS 1.46%

    Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send H

  • 7.2 High severity

    UR32L: Out-of-bounds Write

    CVE-2023-25098MileSightEPSS 1.46%

    Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send H

  • 7.2 High severity

    UR32L: Out-of-bounds Write

    CVE-2023-25097MileSightEPSS 1.46%

    Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send H

  • 7.2 High severity

    UR32L: Out-of-bounds Write

    CVE-2023-25096MileSightEPSS 1.46%

    Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send H

  • 7.2 High severity

    UR32L: Out-of-bounds Write

    CVE-2023-25095MileSightEPSS 1.46%

    Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send H

  • 7.2 High severity

    UR32L: Out-of-bounds Write

    CVE-2023-25094MileSightEPSS 1.46%

    Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send H

  • 7.2 High severity

    UR32L: Out-of-bounds Write

    CVE-2023-25093MileSightEPSS 1.46%

    Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send H

  • 7.2 High severity

    UR32L: Out-of-bounds Write

    CVE-2023-25092MileSightEPSS 1.46%

    Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send H

  • 7.2 High severity

    UR32L: Out-of-bounds Write

    CVE-2023-25091MileSightEPSS 1.46%

    Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send H

  • 7.2 High severity

    UR32L: Out-of-bounds Write

    CVE-2023-25090MileSightEPSS 1.46%

    Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send H

  • 7.2 High severity

    UR32L: Out-of-bounds Write

    CVE-2023-25089MileSightEPSS 1.46%

    Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send H