Vulnerability — CVE-2023-22659

CVE-2023-22659

Reference to the description:: https://nvd.nist.gov/vuln/detail/CVE-2023-22659
Description:: An os command injection vulnerability exists in the libzebra.so change_hostname functionality of Milesight UR32L v32.3.0.5. A specially-crafted network packets can lead to command execution. An attacker can send a sequence of requests to trigger this vulnerability.
Last updated date:: 07/13/2023

Type:: exploit
Confidence:: HIGH
Date of publishing:: 07/13/2023
Reference url to background: https://talosintelligence.com/vulnerability_reports/TALOS-2023-1699