deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-37242
Published: 2023-07-06
Description: Vulnerability of commands from the modem being intercepted in the atcmdserver module. Attackers may exploit this vulnerability to rewrite the non-volatile random-access memory (NVRAM), or facilitate the exploitation of other vulnerabilities.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-639, CWE-639
References: https://consumer.huawei.com/en/support/bulletin/2023/7/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202307-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2023/7/
CVE: CVE-2023-37245
Published: 2023-07-06
Description: Buffer overflow vulnerability in the modem pinctrl module. Successful exploitation of this vulnerability may affect the integrity and availability of the modem.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-120, CWE-120
References: https://consumer.huawei.com/en/support/bulletin/2023/7/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202307-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2023/7/
CVE: CVE-2023-3456
Published: 2023-07-06
Description: Vulnerability of kernel raw address leakage in the  hang detector module. Successful exploitation of this vulnerability may affect service confidentiality.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-20, CWE-668
References: https://consumer.huawei.com/en/support/bulletin/2023/7/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202307-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2023/7/
CVE: CVE-2020-21861
Published: 2023-07-06
Description: File upload vulnerability in DuxCMS 2.1 allows attackers to execute arbitrary php code via duxcms/AdminUpload/upload.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://gitee.com/annyshow/DuxCMS2.1/issues/I182Y4; https://gitee.com/annyshow/DuxCMS2.1/issues/I182Y4
CVE: CVE-2020-21862
Published: 2023-07-06
Description: Directory traversal vulnerability in DuxCMS 2.1 allows attackers to delete arbitrary files via /admin/AdminBackup/del.
CVSS Score: 8.1 (HIGH)
CWE: CWE-22
References: https://gitee.com/annyshow/DuxCMS2.1/issues/I182Z5; https://gitee.com/annyshow/DuxCMS2.1/issues/I182Z5
CVE: CVE-2020-22336
Published: 2023-07-06
Description: An issue was discovered in pdfcrack 0.17 thru 0.18, allows attackers to execute arbitrary code via a stack overflow in the MD5 function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://lists.debian.org/debian-lts-announce/2023/08/msg00004.html; https://sourceforge.net/p/pdfcrack/bugs/12/; https://lists.debian.org/debian-lts-announce/2023/08/msg00004.html
CVE: CVE-2021-46896
Published: 2023-07-06
Description: Buffer Overflow vulnerability in PX4-Autopilot allows attackers to cause a denial of service via handler function handling msgid 332.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120
References: https://github.com/PX4/PX4-Autopilot/issues/18369; https://github.com/PX4/PX4-Autopilot/issues/18369
CVE: CVE-2023-35937
Published: 2023-07-06
Description: Metersphere is an open source continuous testing platform. In versions prior to 2.10.2 LTS, some key APIs in Metersphere lack permission checks. This allows ordinary users to execute APIs that can only be executed by space administrators or project administrators. For example, ordinary users can be updated as space administrators. Version 2.10.2 LTS has a patch for this issue.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-862
References: https://github.com/metersphere/metersphere/security/advisories/GHSA-7xj3-qrx5-524r; https://github.com/metersphere/metersphere/security/advisories/GHSA-7xj3-qrx5-524r
CVE: CVE-2023-36188
Published: 2023-07-06
Description: An issue in langchain v.0.0.64 allows a remote attacker to execute arbitrary code via the PALChain parameter in the Python exec method.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-74
References: https://github.com/hwchase17/langchain/issues/5872; https://github.com/hwchase17/langchain/pull/6003; https://github.com/hwchase17/langchain/issues/5872
CVE: CVE-2023-36189
Published: 2023-07-06
Description: SQL injection vulnerability in langchain before v0.0.247 allows a remote attacker to obtain sensitive information via the SQLDatabaseChain component.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89, CWE-89
References: https://gist.github.com/rharang/9c58d39db8c01db5b7c888e467c0533f; https://github.com/hwchase17/langchain/issues/5923; https://github.com/hwchase17/langchain/pull/6051
CVE: CVE-2023-36968
Published: 2023-07-06
Description: A SQL Injection vulnerability detected in Food Ordering System v1.0 allows attackers to run commands on the database by sending crafted SQL queries to the ID parameter.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://github.com/haxxorsid/food-ordering-system; https://okankurtulus.com.tr/2023/06/21/food-ordering-system-v1-0-authenticated-sql-injection/; https://github.com/haxxorsid/food-ordering-system
CVE: CVE-2023-36995
Published: 2023-07-06
Description: TravianZ through 8.3.4 allows XSS via the Alliance tag/name, the statistics page, the link preferences, the Admin Logs, or the COOKUSR cookie.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://bramdoessecurity.com/travianz-hacked/; https://bramdoessecurity.com/travianz-hacked/
CVE: CVE-2023-22299
Published: 2023-07-06
Description: An OS command injection vulnerability exists in the vtysh_ubus _get_fw_logs functionality of Milesight UR32L v32.3.0.5. A specially crafted network request can lead to command execution. An attacker can send a network request to trigger this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://talosintelligence.com/vulnerability_reports/TALOS-2023-1712; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1712; https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1712
CVE: CVE-2023-22306
Published: 2023-07-06
Description: An OS command injection vulnerability exists in the libzebra.so bridge_group functionality of Milesight UR32L v32.3.0.5. A specially crafted network packet can lead to command execution. An attacker can send a sequence of requests to trigger this vulnerability.
CVSS Score: 7.2 (HIGH)
CWE: CWE-77
References: https://talosintelligence.com/vulnerability_reports/TALOS-2023-1698; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1698; https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1698
CVE: CVE-2023-22319
Published: 2023-07-06
Description: A sql injection vulnerability exists in the requestHandlers.js LoginAuth functionality of Milesight VPN v2.0.2. A specially-crafted network request can lead to authentication bypass. An attacker can send a malicious packet to trigger this vulnerability.
CVSS Score: 7.3 (HIGH)
CWE: CWE-89
References: https://talosintelligence.com/vulnerability_reports/TALOS-2023-1701; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1701; https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1701
CVE: CVE-2023-22365
Published: 2023-07-06
Description: An OS command injection vulnerability exists in the ys_thirdparty check_system_user functionality of Milesight UR32L v32.3.0.5. A specially crafted set of network packets can lead to command execution. An attacker can send a network request to trigger this vulnerability.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: https://talosintelligence.com/vulnerability_reports/TALOS-2023-1711; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1711; https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1711
CVE: CVE-2023-22371
Published: 2023-07-06
Description: An os command injection vulnerability exists in the liburvpn.so create_private_key functionality of Milesight VPN v2.0.2. A specially-crafted network request can lead to command execution. An attacker can send a malicious packet to trigger this vulnerability.
CVSS Score: 8.1 (HIGH)
CWE: CWE-77, CWE-78
References: https://talosintelligence.com/vulnerability_reports/TALOS-2023-1703; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1703; https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1703
CVE: CVE-2023-22653
Published: 2023-07-06
Description: An OS command injection vulnerability exists in the vtysh_ubus tcpdump_start_cb functionality of Milesight UR32L v32.3.0.5. A specially crafted HTTP request can lead to command execution. An authenticated attacker can send an HTTP request to trigger this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://talosintelligence.com/vulnerability_reports/TALOS-2023-1714; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1714; https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1714
CVE: CVE-2023-22659
Published: 2023-07-06
Description: An os command injection vulnerability exists in the libzebra.so change_hostname functionality of Milesight UR32L v32.3.0.5. A specially-crafted network packets can lead to command execution. An attacker can send a sequence of requests to trigger this vulnerability.
CVSS Score: 7.2 (HIGH)
CWE: CWE-77, CWE-78
References: https://talosintelligence.com/vulnerability_reports/TALOS-2023-1699; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1699; https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1699
CVE: CVE-2023-22844
Published: 2023-07-06
Description: An authentication bypass vulnerability exists in the requestHandlers.js verifyToken functionality of Milesight VPN v2.0.2. A specially-crafted network request can lead to authentication bypass. An attacker can send a network request to trigger this vulnerability.
CVSS Score: 7.3 (HIGH)
CWE: CWE-321
References: https://talosintelligence.com/vulnerability_reports/TALOS-2023-1700; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1700; https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1700
CVE: CVE-2023-23546
Published: 2023-07-06
Description: A misconfiguration vulnerability exists in the urvpn_client functionality of Milesight UR32L v32.3.0.5. A specially-crafted man-in-the-middle attack can lead to increased privileges. An attacker can perform a man-in-the-middle attack to trigger this vulnerability.
CVSS Score: 4.2 (MEDIUM)
CWE: CWE-295
References: https://talosintelligence.com/vulnerability_reports/TALOS-2023-1705; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1705; https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1705
CVE: CVE-2023-23547
Published: 2023-07-06
Description: A directory traversal vulnerability exists in the luci2-io file-export mib functionality of Milesight UR32L v32.3.0.5. A specially crafted network request can lead to arbitrary file read. An attacker can send a network request to trigger this vulnerability.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://talosintelligence.com/vulnerability_reports/TALOS-2023-1695; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1695; https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1695
CVE: CVE-2023-23550
Published: 2023-07-06
Description: An OS command injection vulnerability exists in the ys_thirdparty user_delete functionality of Milesight UR32L v32.3.0.5. A specially crafted network packet can lead to command execution. An attacker can send a sequence of requests to trigger this vulnerability.
CVSS Score: 7.2 (HIGH)
CWE: CWE-77, CWE-78
References: https://talosintelligence.com/vulnerability_reports/TALOS-2023-1694; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1694; https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1694
CVE: CVE-2023-23571
Published: 2023-07-06
Description: An access violation vulnerability exists in the eventcore functionality of Milesight UR32L v32.3.0.5. A specially crafted network request can lead to denial of service. An attacker can send a network request to trigger this vulnerability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-126
References: https://talosintelligence.com/vulnerability_reports/TALOS-2023-1696; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1696; https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1696
CVE: CVE-2023-23902
Published: 2023-07-06
Description: A buffer overflow vulnerability exists in the uhttpd login functionality of Milesight UR32L v32.3.0.5. A specially crafted network request can lead to remote code execution. An attacker can send a network request to trigger this vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-121
References: https://talosintelligence.com/vulnerability_reports/TALOS-2023-1697; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1697; https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1697
CVE: CVE-2023-23907
Published: 2023-07-06
Description: A directory traversal vulnerability exists in the server.js start functionality of Milesight VPN v2.0.2. A specially-crafted network request can lead to arbitrary file read. An attacker can send a network request to trigger this vulnerability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://talosintelligence.com/vulnerability_reports/TALOS-2023-1702; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1702; https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1702
CVE: CVE-2023-24018
Published: 2023-07-06
Description: A stack-based buffer overflow vulnerability exists in the libzebra.so.0.0.0 security_decrypt_password functionality of Milesight UR32L v32.3.0.5. A specially crafted HTTP request can lead to a buffer overflow. An authenticated attacker can send an HTTP request to trigger this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-121, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2023-1715; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1715; https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1715
CVE: CVE-2023-24019
Published: 2023-07-06
Description: A stack-based buffer overflow vulnerability exists in the urvpn_client http_connection_readcb functionality of Milesight UR32L v32.3.0.5. A specially crafted network packet can lead to a buffer overflow. An attacker can send a malicious packet to trigger this vulnerability.
CVSS Score: 8.1 (HIGH)
CWE: CWE-120, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2023-1718; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1718; https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1718
CVE: CVE-2023-24496
Published: 2023-07-06
Description: Cross-site scripting (xss) vulnerabilities exist in the requestHandlers.js detail_device functionality of Milesight VPN v2.0.2. A specially-crafted HTTP request can lead to arbitrary Javascript code injection. An attacker can send an HTTP request to trigger these vulnerabilities.This XSS is exploited through the name field of the database.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-80
References: https://talosintelligence.com/vulnerability_reports/TALOS-2023-1704; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1704; https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1704
CVE: CVE-2023-24497
Published: 2023-07-06
Description: Cross-site scripting (xss) vulnerabilities exist in the requestHandlers.js detail_device functionality of Milesight VPN v2.0.2. A specially-crafted HTTP request can lead to arbitrary Javascript code injection. An attacker can send an HTTP request to trigger these vulnerabilities.This XSS is exploited through the remote_subnet field of the database
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-80
References: https://talosintelligence.com/vulnerability_reports/TALOS-2023-1704; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1704; https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1704
CVE: CVE-2023-24519
Published: 2023-07-06
Description: Two OS command injection vulnerability exist in the vtysh_ubus toolsh_excute.constprop.1 functionality of Milesight UR32L v32.3.0.5. A specially-crafted network request can lead to command execution. An attacker can send a network request to trigger these vulnerabilities.This command injection is in the ping tool utility.
CVSS Score: 8.8 (HIGH)
CWE: CWE-77, CWE-78
References: https://talosintelligence.com/vulnerability_reports/TALOS-2023-1706; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1706; https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1706
CVE: CVE-2023-24520
Published: 2023-07-06
Description: Two OS command injection vulnerability exist in the vtysh_ubus toolsh_excute.constprop.1 functionality of Milesight UR32L v32.3.0.5. A specially-crafted network request can lead to command execution. An attacker can send a network request to trigger these vulnerabilities.This command injection is in the trace tool utility.
CVSS Score: 8.8 (HIGH)
CWE: CWE-77, CWE-78
References: https://talosintelligence.com/vulnerability_reports/TALOS-2023-1706; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1706; https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1706
CVE: CVE-2023-24582
Published: 2023-07-06
Description: Two OS command injection vulnerabilities exist in the urvpn_client cmd_name_action functionality of Milesight UR32L v32.3.0.5. A specially crafted network request can lead to arbitrary command execution. An attacker can send a network request to trigger these vulnerabilities.This OS command injection is triggered through a TCP packet.
CVSS Score: 8.8 (HIGH)
CWE: CWE-77, CWE-78
References: https://talosintelligence.com/vulnerability_reports/TALOS-2023-1710; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1710; https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1710
CVE: CVE-2023-24583
Published: 2023-07-06
Description: Two OS command injection vulnerabilities exist in the urvpn_client cmd_name_action functionality of Milesight UR32L v32.3.0.5. A specially crafted network request can lead to arbitrary command execution. An attacker can send a network request to trigger these vulnerabilities.This OS command injection is triggered through a UDP packet.
CVSS Score: 8.8 (HIGH)
CWE: CWE-77
References: https://talosintelligence.com/vulnerability_reports/TALOS-2023-1710; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1710; https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1710
CVE: CVE-2023-24595
Published: 2023-07-06
Description: An OS command injection vulnerability exists in the ys_thirdparty system_user_script functionality of Milesight UR32L v32.3.0.5. A specially crafted series of network requests can lead to command execution. An attacker can send a sequence of requests to trigger this vulnerability.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: https://talosintelligence.com/vulnerability_reports/TALOS-2023-1713; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1713; https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1713
CVE: CVE-2023-25081
Published: 2023-07-06
Description: Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to trigger these vulnerabilities.This buffer overflow occurs in the firewall_handler_set function with the src and dmz variables.
CVSS Score: 7.2 (HIGH)
CWE: CWE-121, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2023-1716; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1716; https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1716
CVE: CVE-2023-25082
Published: 2023-07-06
Description: Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to trigger these vulnerabilities.This buffer overflow occurs in the firewall_handler_set function with the old_ip and old_mac variables.
CVSS Score: 7.2 (HIGH)
CWE: CWE-121, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2023-1716; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1716; https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1716
CVE: CVE-2023-25083
Published: 2023-07-06
Description: Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to trigger these vulnerabilities.This buffer overflow occurs in the firewall_handler_set function with the ip and mac variables.
CVSS Score: 7.2 (HIGH)
CWE: CWE-121, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2023-1716; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1716; https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1716
CVE: CVE-2023-25084
Published: 2023-07-06
Description: Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to trigger these vulnerabilities.This buffer overflow occurs in the firewall_handler_set function with the ip, mac and description variables.
CVSS Score: 7.2 (HIGH)
CWE: CWE-121, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2023-1716; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1716; https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1716
CVE: CVE-2023-25085
Published: 2023-07-06
Description: Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to trigger these vulnerabilities.This buffer overflow occurs in the firewall_handler_set function with the index and to_dst variables.
CVSS Score: 7.2 (HIGH)
CWE: CWE-121, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2023-1716; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1716; https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1716
CVE: CVE-2023-25086
Published: 2023-07-06
Description: Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to trigger these vulnerabilities.This buffer overflow occurs in the firewall_handler_set function with the index and dport variables.
CVSS Score: 7.2 (HIGH)
CWE: CWE-121, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2023-1716; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1716; https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1716
CVE: CVE-2023-25087
Published: 2023-07-06
Description: Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to trigger these vulnerabilities.This buffer overflow occurs in the firewall_handler_set function with the index and to_dport variables.
CVSS Score: 7.2 (HIGH)
CWE: CWE-121, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2023-1716; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1716; https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1716