AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2023-24520

HIGH · CVSS 8.8 EPSS 3.60%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2023-07-06 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2023-24520
Severity
HIGH
CVSS
8.8
EPSS
3.60%

Original NVD Description

Two OS command injection vulnerability exist in the vtysh_ubus toolsh_excute.constprop.1 functionality of Milesight UR32L v32.3.0.5. A specially-crafted network request can lead to command execution. An attacker can send a network request to trigger these vulnerabilities.This command injection is in the trace tool utility.