CVE-2023-43261 - OpenCVE

An information disclosure in Milesight UR5X, UR32L, UR32, UR35, UR41 before v35.3.0.7 allows attackers to access sensitive router components.

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

Vendors & Products
CPE Configurations

Vendors	Products
Milesight	Ur55 Ur32l Ur51 Ur41 Ur32l Firmware Ur52 Ur5x Firmware Ur41 Firmware Ur35 Ur35 Firmware Ur32 Firmware Ur32

Configuration 1 [-]

AND

cpe:2.3:o:milesight:ur5x_firmware:*:*:*:*:*:*:*:*

OR	cpe:2.3:h:milesight:ur51:-:::::::*
	cpe:2.3:h:milesight:ur52:-:::::::*
	cpe:2.3:h:milesight:ur55:-:::::::*

Configuration 2 [-]

AND

cpe:2.3:o:milesight:ur32l_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:milesight:ur32l:-:*:*:*:*:*:*:*

Configuration 3 [-]

AND

cpe:2.3:o:milesight:ur32_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:milesight:ur32:-:*:*:*:*:*:*:*

Configuration 4 [-]

AND

cpe:2.3:o:milesight:ur35_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:milesight:ur35:-:*:*:*:*:*:*:*

Configuration 5 [-]

AND

cpe:2.3:o:milesight:ur41_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:milesight:ur41:-:*:*:*:*:*:*:*

References

Link	Resource
http://milesight.com	Product
http://packetstormsecurity.com/files/176988/Milesight-UR5X-UR32L-UR32-UR35-UR41-Credential-Leakage.html
http://ur5x.com	Broken Link Not Applicable
https://github.com/win3zz/CVE-2023-43261	Exploit Third Party Advisory
https://medium.com/%40win3zz/inside-the-router-how-i-accessed-industrial-routers-and-reported-the-flaws-29c34213dfdf
https://support.milesight-iot.com/support/home	Product

History

No history.

MITRE Information

Status: PUBLISHED

Assigner: mitre

Published: 2023-10-04T00:00:00

Updated: 2024-02-05T17:06:07.922790

Reserved: 2023-09-18T00:00:00

Link: CVE-2023-43261

JSON object: View

NVD Information

Status : Modified

Published: 2023-10-04T12:15:10.627

Modified: 2024-02-05T17:15:08.780

Link: CVE-2023-43261

JSON object: View

Redhat Information

No data.

CWE

CWE-532

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:milesight:ur5x_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "F0915F1C-87D1-4375-9FBC-45C38EBAB645", "versionEndExcluding": "35.3.0.7", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:milesight:ur51:-:*:*:*:*:*:*:*", "matchCriteriaId": "9A5538BB-43CB-461F-9DA3-11F2F147F233", "vulnerable": false}, {"criteria": "cpe:2.3:h:milesight:ur52:-:*:*:*:*:*:*:*", "matchCriteriaId": "22242E4A-9719-4EB1-BB92-2AB606F323A1", "vulnerable": false}, {"criteria": "cpe:2.3:h:milesight:ur55:-:*:*:*:*:*:*:*", "matchCriteriaId": "BFD82DC3-E1E6-4073-8160-03FCADD9151E", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:milesight:ur32l_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "E538CE7E-1300-40FD-B99F-BDBFF104FB55", "versionEndExcluding": "35.3.0.7", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:milesight:ur32l:-:*:*:*:*:*:*:*", "matchCriteriaId": "224B5936-7A7A-48E7-B0F3-754B74E4BF2D", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:milesight:ur32_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "38B4812C-F6AE-4E05-BF80-41DEE6DB3171", "versionEndExcluding": "35.3.0.7", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:milesight:ur32:-:*:*:*:*:*:*:*", "matchCriteriaId": "080EADC9-FFA7-4789-8A88-FD3F484EDC42", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:milesight:ur35_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "8FE72087-C99B-4108-ADA7-1B7FA476E7C1", "versionEndExcluding": "35.3.0.7", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:milesight:ur35:-:*:*:*:*:*:*:*", "matchCriteriaId": "616ACA1E-D93D-4A07-AEE0-37C2AE35A326", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:milesight:ur41_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "E00FF8AD-4E24-4154-BA7B-99867515AB80", "versionEndExcluding": "35.3.0.7", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:milesight:ur41:-:*:*:*:*:*:*:*", "matchCriteriaId": "7D8BC494-6640-47F0-8F58-AB8118C07329", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "descriptions": [{"lang": "en", "value": "An information disclosure in Milesight UR5X, UR32L, UR32, UR35, UR41 before v35.3.0.7 allows attackers to access sensitive router components."}, {"lang": "es", "value": "Una divulgaci\u00f3n de informaci\u00f3n en Milesight UR5X, UR32L, UR32, UR35, UR41 anterior a v35.3.0.7 permite a los atacantes acceder a componentes confidenciales del router."}], "id": "CVE-2023-43261", "lastModified": "2024-02-05T17:15:08.780", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2023-10-04T12:15:10.627", "references": [{"source": "cve@mitre.org", "tags": ["Product"], "url": "http://milesight.com"}, {"source": "cve@mitre.org", "url": "http://packetstormsecurity.com/files/176988/Milesight-UR5X-UR32L-UR32-UR35-UR41-Credential-Leakage.html"}, {"source": "cve@mitre.org", "tags": ["Broken Link", "Not Applicable"], "url": "http://ur5x.com"}, {"source": "cve@mitre.org", "tags": ["Exploit", "Third Party Advisory"], "url": "https://github.com/win3zz/CVE-2023-43261"}, {"source": "cve@mitre.org", "url": "https://medium.com/%40win3zz/inside-the-router-how-i-accessed-industrial-routers-and-reported-the-flaws-29c34213dfdf"}, {"source": "cve@mitre.org", "tags": ["Product"], "url": "https://support.milesight-iot.com/support/home"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-532"}], "source": "nvd@nist.gov", "type": "Primary"}]}