← Back

Devicehub

devicehub

Vendor: Milesight • 6 CVEs

CVEs (6)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Milesight
1Devicehub
Jun 17, 2026
Jun 2, 2024
N/A· v4
6.1 MEDIUM· v3
N/A· v2
MileSight DeviceHub - CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
1Milesight
1Devicehub
Jun 17, 2026
Jun 2, 2024
N/A· v4
7.4 HIGH· v3
N/A· v2
MileSight DeviceHub - CWE-320: Key Management Errors may allow Authentication Bypass and Man-In-The-Middle Traffic
1Milesight
1Devicehub
Jun 17, 2026
Jun 2, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
MileSight DeviceHub - CWE-20 Improper Input Validation may allow Denial of Service
1Milesight
1Devicehub
Jun 17, 2026
Jun 2, 2024
N/A· v4
9.8 CRITICAL· v3
N/A· v2
MileSight DeviceHub - CWE-330 Use of Insufficiently Random Values may allow Authentication Bypass
1Milesight
1Devicehub
Jun 17, 2026
Jun 2, 2024
N/A· v4
9.8 CRITICAL· v3
N/A· v2
MileSight DeviceHub - CWE-305 Missing Authentication for Critical Function
1Milesight
1Devicehub
Jun 17, 2026
Jun 2, 2024
N/A· v4
9.8 CRITICAL· v3
N/A· v2
MileSight DeviceHub - CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') may allow Unauthenticated RCE