Approved changes feed: RSS · Atom

cpe:2.3:o:milesight:ur32l_firmware:32.3.0.7-r2:*:*:*:*:*:*:*

part: o version: 32.3.0.7-r2 update: *

VendorMilesight (29e512ed-02e7-5a62-9acc-b8e7195e4ebe)
ProductUr32L Firmware (e8f353da-52f5-5503-aea3-8aa4d289ff80)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-47166 vulnerable 2026-06-03 14:53:16.978451 Details available
HIGH (8.8)
A firmware update vulnerability exists in the luci2-io file-import functionality of Milesight UR32L v32.3.0.7-r2. A specially crafted network request can lead to arbitrary firmware update. An attacker can send a network request to trigger this vulnerability.
Published: 2024-05-01T15:31:02.072Z
Updated: 2025-11-04T17:12:52.905Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.