CVE Catalog
CVE-2023-43261
HighCVSS 7.5Exploitation Probability (EPSS)
Very high risk59.34%
99th percentile - higher than 99% of all known CVEs
Summary
An information disclosure vulnerability in Milesight UR5X, UR32L, UR32, UR35, and UR41 routers before version 35.3.0.7 allows attackers to access sensitive router components. This flaw can be exploited to leak confidential information.
Risk Assessment
The organization risks exposure of configuration data and other sensitive network information, potentially enabling further attacks on the infrastructure.
Recommendation
Immediately update Milesight router firmware to version 35.3.0.7 or later. Restrict management interface access to trusted networks only.
Original NVD description (English source)
An information disclosure in Milesight UR5X, UR32L, UR32, UR35, UR41 before v35.3.0.7 allows attackers to access sensitive router components.