Vendors / Milesight Records 96 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 16
CVSS high 74
Exploited now Milesight records in CISA KEV No Milesight vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 48
Milesight IP security cameras through 2016-11-14 allow remote attackers to bypass authentication and access a protected resource by simultaneously making a request for the unprotected vb.htm resource.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03098 · Published 2019-10-25 · No fix listed CWE-287
Priority MEDIUM 48
Milesight IP security cameras through 2016-11-14 have a buffer overflow in a web application via a long username or password.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03206 · Published 2019-10-25 · No fix listed CWE-120
Priority MEDIUM 46
Milesight IP security cameras through 2016-11-14 have a default root password in /etc/shadow that is the same across different customers' installations.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02064 · Published 2019-10-25 · No fix listed CWE-798
Priority MEDIUM 46
Milesight IP security cameras through 2016-11-14 have a default set of 10 privileged accounts with hardcoded credentials.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02064 · Published 2019-10-25 · No fix listed CWE-798
Priority MEDIUM 46
Milesight IP security cameras through 2016-11-14 have a hardcoded SSL private key under the /etc/config directory.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02064 · Published 2019-10-25 · No fix listed CWE-798
Open these records in search → All records by CVSS severity
16 74 6 0 0
THREATIST.IORead the docs