Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Milesight Component: Ms-n1004-upc Firmware Clear all filters
TI-2023-14304 CVE-2023-30467 · GHSA-vq3h-p7j6-hwjw

Improper Authorization Vulnerability in Milesight Network Video Recorder (NVR)

Priority MEDIUM 50

This vulnerability exists in Milesight 4K/H.265 Series NVR models (MS-Nxxxx-xxG, MS-Nxxxx-xxE, MS-Nxxxx-xxT, MS-Nxxxx-xxH and MS-Nxxxx-xxC), due to improper authorization at the Milesight NVR web-based management interfa…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01078 Published 2023-04-28 Fixed in 77.9.0.18-r2, 75.9.0.18-r2 +3 CWE-285
TI-2023-14303 CVE-2023-30466 · GHSA-jpv9-5pvw-6mc2

Authentication Bypass Vulnerability in Milesight Network Video Recorder (NVR)

Priority MEDIUM 51

This vulnerability exists in Milesight 4K/H.265 Series NVR models (MS-Nxxxx-xxG, MS-Nxxxx-xxE, MS-Nxxxx-xxT, MS-Nxxxx-xxH and MS-Nxxxx-xxC), due to a weak password reset mechanism at the Milesight NVR web-based managemen…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0113 Published 2023-04-28 Fixed in 77.9.0.18-r2, 75.9.0.18-r2 +3 CWE-640