Milesight

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-24505 1Milesight 1Ncr/camera Firmware Jun 17, 2026 May 8, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Milesight NCR/camera version 71.8.0.6-r5 discloses sensitive information through an unspecified request.
CVE-2023-30467 1Milesight 21Ms N1004 Uc Firmware Ms N1004 Upc FirmwareMs N1008 Uc Firmware+18 more Jun 17, 2026 Apr 28, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 This vulnerability exists in Milesight 4K/H.265 Series NVR models (MS-Nxxxx-xxG, MS-Nxxxx-xxE, MS-Nxxxx-xxT, MS-Nxxxx-xxH and MS-Nxxxx-xxC), due to improper authorization at the Milesight NVR web-based management interfa...Show more This vulnerability exists in Milesight 4K/H.265 Series NVR models (MS-Nxxxx-xxG, MS-Nxxxx-xxE, MS-Nxxxx-xxT, MS-Nxxxx-xxH and MS-Nxxxx-xxC), due to improper authorization at the Milesight NVR web-based management interface. A remote attacker could exploit this vulnerability by sending a specially crafted http requests on the targeted device. Successful exploitation of this vulnerability could allow remote attacker to perform unauthorized activities on the targeted device. Show less
CVE-2023-30466 1Milesight 21Ms N1004 Uc Firmware Ms N1004 Upc FirmwareMs N1008 Uc Firmware+18 more Jun 17, 2026 Apr 28, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 This vulnerability exists in Milesight 4K/H.265 Series NVR models (MS-Nxxxx-xxG, MS-Nxxxx-xxE, MS-Nxxxx-xxT, MS-Nxxxx-xxH and MS-Nxxxx-xxC), due to a weak password reset mechanism at the Milesight NVR web-based managemen...Show more This vulnerability exists in Milesight 4K/H.265 Series NVR models (MS-Nxxxx-xxG, MS-Nxxxx-xxE, MS-Nxxxx-xxT, MS-Nxxxx-xxH and MS-Nxxxx-xxC), due to a weak password reset mechanism at the Milesight NVR web-based management interface. A remote attacker could exploit this vulnerability by sending a specially crafted http requests on the targeted device. Successful exploitation of this vulnerability could allow remote attacker to account takeover on the targeted device. Show less
CVE-2022-3001 1Milesight 1Video Management Systems Firmware Jun 17, 2026 Sep 15, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 This vulnerability exists in Milesight Video Management Systems (VMS), all firmware versions prior to 40.7.0.79-r1, due to improper input handling at camera’s web-based management interface. A remote attacker could explo...Show more This vulnerability exists in Milesight Video Management Systems (VMS), all firmware versions prior to 40.7.0.79-r1, due to improper input handling at camera’s web-based management interface. A remote attacker could exploit this vulnerability by sending a specially crafted http request on the targeted network camera. Successful exploitation of this vulnerability could allow the attacker to cause a Denial of Service condition on the targeted device.Show less
CVE-2016-2360 1Milesight 1Ip Security Camera Firmware Nov 21, 2024 Oct 25, 2019 N/A· v4 9.8 CRITICAL· v3 5.0 MEDIUM· v2 Milesight IP security cameras through 2016-11-14 have a default root password in /etc/shadow that is the same across different customers' installations.
CVE-2016-2359 1Milesight 1Ip Security Camera Firmware Nov 21, 2024 Oct 25, 2019 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Milesight IP security cameras through 2016-11-14 allow remote attackers to bypass authentication and access a protected resource by simultaneously making a request for the unprotected vb.htm resource.
CVE-2016-2358 1Milesight 1Ip Security Camera Firmware Nov 21, 2024 Oct 25, 2019 N/A· v4 9.8 CRITICAL· v3 5.0 MEDIUM· v2 Milesight IP security cameras through 2016-11-14 have a default set of 10 privileged accounts with hardcoded credentials. They are accessible if the customer has not configured 10 actual user accounts.
CVE-2016-2357 1Milesight 1Ip Security Camera Firmware Nov 21, 2024 Oct 25, 2019 N/A· v4 9.8 CRITICAL· v3 5.0 MEDIUM· v2 Milesight IP security cameras through 2016-11-14 have a hardcoded SSL private key under the /etc/config directory.
CVE-2016-2356 1Milesight 1Ip Security Camera Firmware Nov 21, 2024 Oct 25, 2019 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Milesight IP security cameras through 2016-11-14 have a buffer overflow in a web application via a long username or password.

Previous 1 2 3 45