ID:12001 - Exploit for Inclusion of Sensitive Information in Log Files in Milesight products - CVE-2023-43261

 
Main Vulnerability Database Exploits ID:12001 - Exploit for Inclusion of Sensitive Information in Log Files in Milesight products - CVE-2023-43261

ID:12001 - Exploit for Inclusion of Sensitive Information in Log Files in Milesight products - CVE-2023-43261

Published: October 2, 2025


Vulnerability identifier: #VU116389
Vulnerability risk: Medium
CVE-ID: CVE-2023-43261
CWE-ID: CWE-532
Exploitation vector: Remote access
Vulnerable software:
UR5X
UR32L
UR32
UR35
UR41

Link to public exploit:


Vulnerability description

The vulnerability allows a remote attacker to gain access to sensitive information.

The vulnerability exists due to software stores sensitive information into log files. A remote attacker can read the log files and gain access to sensitive data.


Remediation

Install updates from vendor's website.