Potential Information Disclosure via CVE-2023-43261 Exploitation in Milesight Routers

SigmaHQ Detections@sigmaHQ

•updated Sep 2, 2024•0•20

Detects exploitation attempts of CVE-2023-43261, an information disclosure vulnerability in Milesight UR5X, UR32L, UR32, UR35, UR41 routers before v35.3.0.7. This vulnerability allows attackers to access sensitive router components by requesting the '/lang/log/httpd.log' file, which can contain passwords and other critical information.