Read the docs

Milesight

Records96All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical16CVSS 9.0–10.0
CVSS high74CVSS 7.0–8.9

Exploited now

Milesight records in CISA KEV

No Milesight vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Ur32l Firmware 66 records HIGH Devicehub 6 records MEDIUM Ip Security Camera Firmware 5 records MEDIUM Milesightvpn 5 records HIGH Ncr/camera Firmware 3 records MEDIUM Ms-n1004-uc Firmware 2 records MEDIUM Ms-n1004-upc Firmware 2 records MEDIUM Ms-n1008-uc Firmware 2 records MEDIUM

Records

2 records in Ms-n1004-upc Firmware · all components

TI-2023-14303 CVE-2023-30466 · GHSA-jpv9-5pvw-6mc2

Authentication Bypass Vulnerability in Milesight Network Video Recorder (NVR)

Priority MEDIUM 51

This vulnerability exists in Milesight 4K/H.265 Series NVR models (MS-Nxxxx-xxG, MS-Nxxxx-xxE, MS-Nxxxx-xxT, MS-Nxxxx-xxH and MS-Nxxxx-xxC), due to a weak password reset mechanism at the Milesight NVR web-based managemen…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0113 Published 2023-04-28 Fixed in 77.9.0.18-r2, 75.9.0.18-r2 +3 CWE-640
TI-2023-14304 CVE-2023-30467 · GHSA-vq3h-p7j6-hwjw

Improper Authorization Vulnerability in Milesight Network Video Recorder (NVR)

Priority MEDIUM 50

This vulnerability exists in Milesight 4K/H.265 Series NVR models (MS-Nxxxx-xxG, MS-Nxxxx-xxE, MS-Nxxxx-xxT, MS-Nxxxx-xxH and MS-Nxxxx-xxC), due to improper authorization at the Milesight NVR web-based management interfa…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01078 Published 2023-04-28 Fixed in 77.9.0.18-r2, 75.9.0.18-r2 +3 CWE-285
Open these records in search →