{"id":"CVE-2023-43261","aliases":["EUVD-2023-47680","GHSA-3r5f-38cp-r8x3"],"status":"published","title":"An information disclosure in Milesight UR5X, UR32L, UR32, UR35, UR41 before v35.3.0.7 allows...","description":"An information disclosure in Milesight UR5X, UR32L, UR32, UR35, UR41 before v35.3.0.7 allows attackers to access sensitive router components.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.63674,"percentile":0.99224,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-532"],"published":"2023-10-04T00:00:00Z","modified":"2026-07-09T01:18:40Z","exploits":[{"source":"nuclei","id":"CVE-2023-43261","title":"Milesight Routers - Information Disclosure","type":"detection template","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-43261.yaml"},{"source":"pocgithub","id":"win3zz/CVE-2023-43261","title":"win3zz/CVE-2023-43261","date":"2023-09-28","url":"https://github.com/win3zz/CVE-2023-43261"}],"products":[{"vendor":"milesight","product":"ur32_firmware"},{"vendor":"milesight","product":"ur32l_firmware"},{"vendor":"milesight","product":"ur35_firmware"},{"vendor":"milesight","product":"ur41_firmware"},{"vendor":"milesight","product":"ur5x_firmware"}],"references":[{"url":"https://support.milesight-iot.com/support/home","tags":["x_transferred","Product"]},{"url":"https://github.com/win3zz/CVE-2023-43261","tags":["x_transferred","Exploit","Third Party Advisory"]},{"url":"https://medium.com/@win3zz/inside-the-router-how-i-accessed-industrial-routers-and-reported-the-flaws-29c34213dfdf"},{"url":"http://packetstormsecurity.com/files/176988/Milesight-UR5X-UR32L-UR32-UR35-UR41-Credential-Leakage.html","tags":["x_transferred"]},{"url":"https://medium.com/%40win3zz/inside-the-router-how-i-accessed-industrial-routers-and-reported-the-flaws-29c34213dfdf","tags":["x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-43261"},{"url":"http://milesight.com"},{"url":"http://ur5x.com"},{"url":"https://github.com/advisories/GHSA-3r5f-38cp-r8x3"}],"sources":{"cve":[{"id":"CVE-2023-43261","description":"An information disclosure in Milesight UR5X, UR32L, UR32, UR35, UR41 before v35.3.0.7 allows attackers to access sensitive router components.","status":"published","published":"2023-10-04T00:00:00Z","modified":"2026-07-09T00:28:28.683Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"adp"}],"cwes":["CWE-532"],"updated_at":"2026-11-02T14:35:14.633899Z"}],"euvd":[{"id":"EUVD-2023-47680","description":"An information disclosure in Milesight UR5X, UR32L, UR32, UR35, UR41 before v35.3.0.7 allows attackers to access sensitive router components.","status":"published","published":"2023-10-04T00:00:00Z","modified":"2026-07-09T00:28:28Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T18:20:05.755223Z"}],"ghsa":[{"id":"GHSA-3r5f-38cp-r8x3","title":"An information disclosure in Milesight UR5X, UR32L, UR32, UR35, UR41 before v35.3.0.7 allows...","description":"An information disclosure in Milesight UR5X, UR32L, UR32, UR35, UR41 before v35.3.0.7 allows attackers to access sensitive router components.","status":"published","published":"2023-10-04T12:30:14Z","modified":"2024-02-05T18:31:36Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"cwes":["CWE-532"],"updated_at":"2026-11-02T14:55:33.593991Z"}],"nvd":[{"id":"CVE-2023-43261","description":"An information disclosure in Milesight UR5X, UR32L, UR32, UR35, UR41 before v35.3.0.7 allows attackers to access sensitive router components.","status":"published","published":"2023-10-04T12:15:10.627Z","modified":"2026-07-09T01:18:40.603Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"secondary"}],"cwes":["CWE-532"],"updated_at":"2026-11-02T14:08:35.022405Z"}]}}