Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Vendor: Milestone Systems Clear all filters
TI-2026-02603 CVE-2026-3014 · GHSA-qf7x-39m3-h7wc

Remote Code Execution by administrative user on the Management Server

Priority LOW 32

Milestone has released a new version of XProtect® (and several cumulative patch updates) which fix security vulnerability in Management Server API.

CVSS 4.0MEDIUM 6.4 Network High privileges No interaction EPSS 0.00782 Published 2026-07-14 No fix listed CWE-78
TI-2025-00708 CVE-2025-0836 · GHSA-mrcm-cqrc-38qw

XProtect MIP API Missing Authorization

Priority LOW 23

Missing Authorization vulnerability in Milestone Systems XProtect VMS allows users with read-only access to Management Server to have full read/write access to MIP Webhooks API.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00213 Published 2025-12-16 Fixed in 23.1.157.1.1470, 23.2.21.1.398 +4 CWE-862
TI-2025-01451 CVE-2025-1688 · GHSA-xhqv-r4f7-v88g

System configuration password reset

Priority LOW 24

Milestone Systems has discovered a security vulnerability in Milestone XProtect installer that resets system configuration password after the upgrading from older versions using specific installers.

CVSS 4.0MEDIUM 5.5 Network High privileges No interaction EPSS 0.00243 Published 2025-04-15 No fix listed CWE-1394
TI-2024-11662 CVE-2024-12569 · GHSA-85g9-m9j2-hcx2

Sensitive Information in Driver’s Log File

Priority LOW 29

Disclosure of sensitive information in a Milestone XProtect Device Pack driver’s log file for third-party cameras, allows an attacker to read camera credentials stored in the Recording Server under specific conditions.

CVSS 4.0MEDIUM 5.2 Local Low privileges No interaction EPSS 0.00147 Published 2024-12-19 Fixed in 13.5a CWE-532
TI-2024-03270 CVE-2024-3506 · GHSA-47jx-4vx3-m8j8

Camera Driver possible Buffer Overflow

Priority LOW 34

A possible buffer overflow in selected cameras' drivers from XProtect Device Pack can allow an attacker with access to internal network to execute commands on Recording Server under strict conditions.

CVSS 4.0HIGH 7.3 Adjacent network No auth User interaction EPSS 0.00232 Published 2024-10-08 No fix listed CWE-120