CVE-2023-23550

HIGH · CVSS 7.2 EPSS 3.61%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2023-07-06 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2023-23550

Severity

HIGH

CVSS

7.2

EPSS

3.61%

Original NVD Description

An OS command injection vulnerability exists in the ys_thirdparty user_delete functionality of Milesight UR32L v32.3.0.5. A specially crafted network packet can lead to command execution. An attacker can send a sequence of requests to trigger this vulnerability.