CVE-2023-47166

CVSS 3.1: 8.8 high
EPSS: <1%p48
Published: May 1, 2024 · May 1, 2024
Modified: Jun 17, 2026

Analyze CVE-2023-47166 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

A firmware update vulnerability exists in the luci2-io file-import functionality of Milesight UR32L v32.3.0.7-r2. A specially crafted network request can lead to arbitrary firmware update. An attacker can send a network request to trigger this vulnerability.

Vendors: milesight

Products: ur32l firmware

Weakness: CWE-285, CWE-306

Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news

1 story

Talos discloses multiple zero-day vulnerabilities, two of which could lead to code execution

Cisco TalosMay 8, 16:00 UTC · May 8, 2024Exploit / PoCCVE-2023-49606 CVE-2023-47166 CVE-2023-472122 · 1 read