Skip to content
Noroxi

Milesight records

89 published records for vendor milesight.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
6
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 19
  2. 22
  3. 23
  4. 24
  5. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

89 records
  • CVE-2023-43261
    49Plan

    An information disclosure in Milesight UR5X, UR32L, UR32, UR35, UR41 before v35.3.0.7 allows attackers to access sensitive router components

    HighCVSS 7.5Proof of conceptEPSS 64%

    milesight · ur5x firmwareOct 4, 2023

  • CVE-2016-2356
    40Plan

    Milesight IP security cameras through 2016-11-14 have a buffer overflow in a web application via a long username or password.

    CriticalCVSS 9.8No exploitEPSS 3%

    milesight · ip security camera firmwareOct 25, 2019

  • CVE-2016-2359
    40Plan

    Milesight IP security cameras through 2016-11-14 allow remote attackers to bypass authentication and access a protected resource by simultan

    CriticalCVSS 9.8No exploitEPSS 3%

    milesight · ip security camera firmwareOct 25, 2019

  • CVE-2023-23902
    40Plan

    A buffer overflow vulnerability exists in the uhttpd login functionality of Milesight UR32L v32.3.0.5.

    CriticalCVSS 9.8No exploitEPSS 2%

    milesight · ur32l firmwareJul 6, 2023

  • CVE-2016-2357
    40Plan

    Milesight IP security cameras through 2016-11-14 have a hardcoded SSL private key under the /etc/config directory.

    CriticalCVSS 9.8No exploitEPSS 2%

    milesight · ip security camera firmwareOct 25, 2019

  • CVE-2016-2360
    40Plan

    Milesight IP security cameras through 2016-11-14 have a default root password in /etc/shadow that is the same across different customers' in

    CriticalCVSS 9.8No exploitEPSS 2%

    milesight · ip security camera firmwareOct 25, 2019

  • CVE-2016-2358
    40Plan

    Milesight IP security cameras through 2016-11-14 have a default set of 10 privileged accounts with hardcoded credentials.

    CriticalCVSS 9.8No exploitEPSS 2%

    milesight · ip security camera firmwareOct 25, 2019

  • CVE-2023-30466
    39Monitor

    Authentication Bypass Vulnerability in Milesight Network Video Recorder (NVR)

    CriticalCVSS 9.8No exploitEPSS 1%

    milesight · ms-n5008-uc firmwareApr 28, 2023

  • CVE-2023-30467
    39Monitor

    Improper Authorization Vulnerability in Milesight Network Video Recorder (NVR)

    CriticalCVSS 9.8No exploitEPSS 1%

    milesight · ms-n5008-uc firmwareApr 28, 2023

  • CVE-2023-22319
    39Monitor

    A sql injection vulnerability exists in the requestHandlers.js LoginAuth functionality of Milesight VPN v2.0.2.

    CriticalCVSS 9.8No exploitEPSS 1%

    milesight · milesightvpnJul 6, 2023

  • CVE-2023-22844
    39Monitor

    An authentication bypass vulnerability exists in the requestHandlers.js verifyToken functionality of Milesight VPN v2.0.2.

    CriticalCVSS 9.8No exploitEPSS 1%

    milesight · milesightvpnJul 6, 2023

  • CVE-2024-27776
    39Monitor

    MileSight DeviceHub - CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

    CriticalCVSS 9.8No exploitEPSS 1%

    milesight · devicehubJun 2, 2024

  • CVE-2023-32220
    39Monitor

    Milesight NCR/Camera Authentication Bypass

    CriticalCVSS 9.8No exploitEPSS 1%

    milesight · ncr\/camera firmwareJun 12, 2023

  • CVE-2024-36389
    39Monitor

    MileSight DeviceHub - CWE-330 Use of Insufficiently Random Values

    CriticalCVSS 9.8No exploitEPSS 1%

    milesight · devicehubJun 2, 2024

  • CVE-2024-36388
    39Monitor

    MileSight DeviceHub - CWE-305 Missing Authentication for Critical Function

    CriticalCVSS 9.8No exploitEPSS 0%

    milesight · devicehubJun 2, 2024

  • CVE-2023-22653
    37Monitor

    An OS command injection vulnerability exists in the vtysh_ubus tcpdump_start_cb functionality of Milesight UR32L v32.3.0.5.

    HighCVSS 8.8No exploitEPSS 6%

    milesight · ur32l firmwareJul 6, 2023

  • CVE-2023-22299
    36Monitor

    An OS command injection vulnerability exists in the vtysh_ubus _get_fw_logs functionality of Milesight UR32L v32.3.0.5.

    HighCVSS 8.8No exploitEPSS 4%

    milesight · ur32l firmwareJul 6, 2023

  • CVE-2023-24519
    36Monitor

    Two OS command injection vulnerability exist in the vtysh_ubus toolsh_excute.constprop.1 functionality of Milesight UR32L v32.3.0.5.

    HighCVSS 8.8No exploitEPSS 4%

    milesight · ur32l firmwareJul 6, 2023

  • CVE-2023-24520
    36Monitor

    Two OS command injection vulnerability exist in the vtysh_ubus toolsh_excute.constprop.1 functionality of Milesight UR32L v32.3.0.5.

    HighCVSS 8.8No exploitEPSS 4%

    milesight · ur32l firmwareJul 6, 2023

  • CVE-2023-24582
    36Monitor

    Two OS command injection vulnerabilities exist in the urvpn_client cmd_name_action functionality of Milesight UR32L v32.3.0.5.

    HighCVSS 8.8No exploitEPSS 3%

    milesight · ur32l firmwareJul 6, 2023

  • CVE-2023-24583
    36Monitor

    Two OS command injection vulnerabilities exist in the urvpn_client cmd_name_action functionality of Milesight UR32L v32.3.0.5.

    HighCVSS 8.8No exploitEPSS 3%

    milesight · ur32l firmwareJul 6, 2023

  • CVE-2023-24018
    35Monitor

    A stack-based buffer overflow vulnerability exists in the libzebra.so.0.0.0 security_decrypt_password functionality of Milesight UR32L v32.3

    HighCVSS 8.8No exploitEPSS 1%

    milesight · ur32l firmwareJul 6, 2023

  • CVE-2023-47166
    35Monitor

    A firmware update vulnerability exists in the luci2-io file-import functionality of Milesight UR32L v32.3.0.7-r2.

    HighCVSS 8.8No exploitEPSS 1%

    milesight · ur32l firmwareMay 1, 2024

  • CVE-2023-22371
    33Monitor

    An os command injection vulnerability exists in the liburvpn.so create_private_key functionality of Milesight VPN v2.0.2.

    HighCVSS 8.1No exploitEPSS 3%

    milesight · milesightvpnJul 6, 2023

  • CVE-2023-24019
    32Monitor

    A stack-based buffer overflow vulnerability exists in the urvpn_client http_connection_readcb functionality of Milesight UR32L v32.3.0.5.

    HighCVSS 8.1No exploitEPSS 1%

    milesight · ur32l firmwareJul 6, 2023