CVE-2023-43261

· HIGHModified

← All CVEs

CVSS v3.1

7.5

EPSS

59.34%

Published

Oct 4, 2023

Modified

May 1, 2025

Public PoC / Exploit (2)

All weaponized →

NucleiNuclei detection template TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

An information disclosure in Milesight UR5X, UR32L, UR32, UR35, UR41 before v35.3.0.7 allows attackers to access sensitive router components.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weaknesses (CWE)

CWE-532CWE-532

Affected Products (12)

milesight · ur5x_firmware (up to 35.3.0.7)vulnerable

milesight · ur51

milesight · ur52

milesight · ur55

milesight · ur32l_firmware (up to 35.3.0.7)vulnerable

milesight · ur32l

milesight · ur32_firmware (up to 35.3.0.7)vulnerable

milesight · ur32

milesight · ur35_firmware (up to 35.3.0.7)vulnerable

milesight · ur35

milesight · ur41_firmware (up to 35.3.0.7)vulnerable

milesight · ur41

References (12)

http://milesight.com

Product

http://packetstormsecurity.com/files/176988/Milesight-UR5X-UR32L-UR32-UR35-UR41-Credential-Leakage.html

http://ur5x.com

Broken LinkNot Applicable

https://github.com/win3zz/CVE-2023-43261

ExploitThird Party Advisory

https://medium.com/%40win3zz/inside-the-router-how-i-accessed-industrial-routers-and-reported-the-flaws-29c34213dfdf

https://support.milesight-iot.com/support/home

Product

http://milesight.com

Product

http://packetstormsecurity.com/files/176988/Milesight-UR5X-UR32L-UR32-UR35-UR41-Credential-Leakage.html

http://ur5x.com

Broken LinkNot Applicable

https://github.com/win3zz/CVE-2023-43261

ExploitThird Party Advisory

https://medium.com/%40win3zz/inside-the-router-how-i-accessed-industrial-routers-and-reported-the-flaws-29c34213dfdf

https://support.milesight-iot.com/support/home

Product

KEV Catalog EPSS Scores Vendors All CVEs