• bunee
• October 17, 2023
• No Comments

Main Points

• Industrial cellular routers from Milesight have a high-severity flaw which may be actively targeted by cyber attackers.
• The findings were disclosed by VulnCheck.
• The vulnerability, labelled as CVE-2023-43261 with a CVSS score of 7.5, is an issue of information disclosure.
• Routers affected include models UR5X, UR32L, UR32, UR35, and UR41 before version 35.3.0.7.
• The flaw could potentially give attackers access to data not originally disclosed.

This Router is Going Places… and Taking Your Data With It

Industrial cellular routers from Milesight have recently been exposed to have a severe flaw. Cyber attackers might be taking the Milesight router down exploit highway. Buckle up, folks because VulnCheck came up with the road map!

Make No MISTAKE: It’s a Serious Flaw

This vulnerability, keeping things cryptic with its moniker CVE-2023-43261, has a CVSS score of 7.5. For those not in the know, that’s like saying this flaw is dressed to kill; the higher the score, the more severe the vulnerability. This isn’t something to be taken lightly, since it’s an issue of information disclosure. In layman’s terms: It’s leaking data like a rusty bucket!

Router Roll Call: Who’s Affected?

Routers affected in this debacle include some rather sophisticated models: UR5X, UR32L, UR32, UR35, and UR41. Just to add to the drama, this affects any router model before version 35.3.0.7. Think of this as an unexpected and unwelcome time travel twist in your favorite tech series!

The Unwelcomed Gift to Attackers

This catastrophic glitch doesn’t require a dashing hero to save the day, but it does have the potential to give attackers a key to the kingdom- access to undisclosed data, to be precise. It’s as if the router threw a party and didn’t check the guest list!

The Whole Shebang: A Summary

In a nutshell, Milesight’s industrial cellular routers have a severe security flaw. This has been revealed by cybersecurity company VulnCheck, who have sounded the alarm bells on this high-danger-rated issue (CVE-2023-43261). The vulnerability impacts the UR5X, UR32L, UR32, UR35, and UR41 models preceding version 35.3.0.7. This concerns all those who don’t want their previously undisclosed data to fall into the wrong hands. So, if your tech-savvy dad happens to have one of these routers, it might be time to gift him a shiny, new, flaw-free model. Trust us, he’ll appreciate the gesture… and the security.

Original Article: https://thehackernews.com/2023/10/experts-warn-of-severe-flaws-affecting.html