Exploit for #VU116389 Inclusion of Sensitive Information in Log Files in Milesight products

Vulnerability identifier: #VU116389

Vulnerability risk: Medium

CVSSv4.0: 7.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/U:Green]

CVE-ID: CVE-2023-43261

CWE-ID: CWE-532

Exploitation vector: Network

Exploits in database: 2

• October 2, 2025
  • Milesight Routers UR5X_ UR32L_ UR32_ UR35_ UR41 - Credential Leakage Through Unprotected System Logs and Weak Password Encryption [Exploit-DB]
  • CVE-2023-43261 (CVE-2023-43261 - Credential Leakage Through Unprotected System Logs and Weak Password Encryption) [Github]

Vulnerable software:
UR5X
Hardware solutions / Routers & switches, VoIP, GSM, etc
UR32L
Hardware solutions / Routers & switches, VoIP, GSM, etc
UR32
Hardware solutions / Routers & switches, VoIP, GSM, etc
UR35
Hardware solutions / Routers & switches, VoIP, GSM, etc
UR41
Hardware solutions / Routers & switches, VoIP, GSM, etc

Vendor: