Priority LOW 37
A cleartext transmission of sensitive information vulnerability in the NFC interface of multiple Milesight IoT device models running affected firmware versions allows an unauthenticated attacker with physical proximity t…
CVSS 4.0HIGH 8.3· Physical · No auth · No interaction · EPSS 0.00166 · Published 2026-08-26 · No fix listed CWE-319
Priority LOW 39
An out-of-bounds memory access vulnerability exists in specific firmware versions of Milesight AIOT cameras.
CVSS 4.0HIGH 8.6· Network · No auth · User interaction · EPSS 0.00288 · Published 2026-04-27 · No fix listed CWE-122
Priority LOW 36
A command injection vulnerability exists in the web server of specific firmware versions of Milesight cameras.
CVSS 4.0HIGH 7.3· Network · High privileges · User interaction · EPSS 0.00863 · Published 2026-04-27 · No fix listed CWE-78
Priority MEDIUM 47
Specific firmware versions of Milesight AIOT cameras use SSL certificates with default private keys.
CVSS 4.0CRITICAL 9.2· Network · No auth · No interaction · EPSS 0.00218 · Published 2026-04-27 · No fix listed CWE-321
Priority LOW 35
Specific firmware versions of Milesight AIOT camera firmware contain hard-coded credentials.
CVSS 4.0HIGH 7.7· Adjacent network · No auth · No interaction · EPSS 0.00224 · Published 2026-04-27 · No fix listed CWE-798
Priority LOW 33
A weak key generation vulnerability exists in specific firmware versions of Milesight AIOT cameras allows authorization to be bypassed.
CVSS 4.0HIGH 7.3· Adjacent network · No auth · User interaction · EPSS 0.00177 · Published 2026-04-27 · No fix listed CWE-639
Priority LOW 27
An admin user can gain unauthorized write access to the /etc/rc.local file on the device, which is executed on a system boot.
CVSS 4.0MEDIUM 6.1· Network · High privileges · No interaction · EPSS 0.00354 · Published 2025-05-07 · Fixed in 60.0.0.46 CWE-1274
Priority LOW 27
MileSight DeviceHub - CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00272 · Published 2024-06-02 · Fixed in Upgrade to the latest version. CWE-79
Priority MEDIUM 47
MileSight DeviceHub - CWE-320: Key Management Errors may allow Authentication Bypass and Man-In-The-Middle Traffic
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.00353 · Published 2024-06-02 · Fixed in Upgrade to the latest version. CWE-320
Priority LOW 39
MileSight DeviceHub - CWE-20 Improper Input Validation may allow Denial of Service
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00418 · Published 2024-06-02 · Fixed in Upgrade to the latest version. CWE-20
Priority MEDIUM 49
MileSight DeviceHub - CWE-330 Use of Insufficiently Random Values may allow Authentication Bypass
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00519 · Published 2024-06-02 · Fixed in Upgrade to the latest version. CWE-330
Priority MEDIUM 49
MileSight DeviceHub - CWE-305 Missing Authentication for Critical Function
CVSS 3.1CRITICAL 10.0· Network · No auth · No interaction · EPSS 0.00473 · Published 2024-06-02 · Fixed in Upgrade to the latest version. CWE-305
Priority MEDIUM 50
MileSight DeviceHub - CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') may allow Unauthenticated RCE
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00597 · Published 2024-06-02 · Fixed in Upgrade to the latest version. CWE-22
Priority MEDIUM 41
A firmware update vulnerability exists in the luci2-io file-import functionality of Milesight UR32L v32.3.0.7-r2.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00637 · Published 2024-05-01 · No fix listed CWE-285
Priority MEDIUM 60
Milesight UR5X, UR32L, UR32, UR35, UR41 before v35.3.0.7 was discovered to contain a cross-site scripting (XSS) vulnerability via the admin panel.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00423 · Published 2023-10-05 · No fix listed CWE-79
Priority HIGH 74
An information disclosure in Milesight UR5X, UR32L, UR32, UR35, UR41 before v35.3.0.7 allows attackers to access sensitive router components.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.6304 · Published 2023-10-04 · No fix listed CWE-532
Priority HIGH 67
An OS command injection vulnerability exists in the ys_thirdparty user_delete functionality of Milesight UR32L v32.3.0.5.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.03607 · Published 2023-07-06 · No fix listed CWE-77
Priority LOW 31
A directory traversal vulnerability exists in the luci2-io file-export mib functionality of Milesight UR32L v32.3.0.5.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01256 · Published 2023-07-06 · No fix listed CWE-22
Priority HIGH 72
An access violation vulnerability exists in the eventcore functionality of Milesight UR32L v32.3.0.5.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01078 · Published 2023-07-06 · No fix listed CWE-126
Priority HIGH 82
A buffer overflow vulnerability exists in the uhttpd login functionality of Milesight UR32L v32.3.0.5.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02212 · Published 2023-07-06 · No fix listed CWE-121
Priority HIGH 67
An OS command injection vulnerability exists in the libzebra.so bridge_group functionality of Milesight UR32L v32.3.0.5.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.03577 · Published 2023-07-06 · No fix listed CWE-77
Priority HIGH 67
An os command injection vulnerability exists in the libzebra.so change_hostname functionality of Milesight UR32L v32.3.0.5.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.0373 · Published 2023-07-06 · No fix listed CWE-77
Priority HIGH 81
An authentication bypass vulnerability exists in the requestHandlers.js verifyToken functionality of Milesight VPN v2.0.2.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00759 · Published 2023-07-06 · No fix listed CWE-321
Priority HIGH 81
A sql injection vulnerability exists in the requestHandlers.js LoginAuth functionality of Milesight VPN v2.0.2.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00903 · Published 2023-07-06 · No fix listed CWE-89
Priority MEDIUM 41
A directory traversal vulnerability exists in the server.js start functionality of Milesight VPN v2.0.2.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01242 · Published 2023-07-06 · No fix listed CWE-22
Load more
THREATIST.IORead the docs