Read the docs

Milesight

Records96All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical16CVSS 9.0–10.0
CVSS high74CVSS 7.0–8.9

Exploited now

Milesight records in CISA KEV

No Milesight vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Ur32l Firmware 66 records HIGH Devicehub 6 records MEDIUM Ip Security Camera Firmware 5 records MEDIUM Milesightvpn 5 records HIGH Ncr/camera Firmware 3 records MEDIUM Ms-n1004-uc Firmware 2 records MEDIUM Ms-n1004-upc Firmware 2 records MEDIUM Ms-n1008-uc Firmware 2 records MEDIUM

Records

6 records in Devicehub · all components

TI-2024-18395 CVE-2024-27776 · GHSA-g93h-34rm-55x7

Path traversal in Milesight DeviceHub

Priority MEDIUM 50

MileSight DeviceHub - CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') may allow Unauthenticated RCE

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00597 Published 2024-06-02 Fixed in Upgrade to the latest version. CWE-22
TI-2024-24177 CVE-2024-36391 · GHSA-5h7p-2q7c-v7w8

MileSight DeviceHub - CWE-320: Key Management Errors

Priority MEDIUM 47

MileSight DeviceHub - CWE-320: Key Management Errors may allow Authentication Bypass and Man-In-The-Middle Traffic

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00353 Published 2024-06-02 Fixed in Upgrade to the latest version. CWE-320
TI-2024-24176 CVE-2024-36390 · GHSA-53mw-3q46-v8vp

Improper input validation in Milesight DeviceHub

Priority LOW 39

MileSight DeviceHub - CWE-20 Improper Input Validation may allow Denial of Service

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00418 Published 2024-06-02 Fixed in Upgrade to the latest version. CWE-20
Open these records in search →