Skip to content
OpenAdvisories

Vendor

Milesight

94 known vulnerabilities.

Products

UR32L 64 DeviceHub 6 MilesightVPN 6 MS-Cxx63-PD 5 MS-Cxx64-xPD 5 MS-Cxx73-xPD 5 MS-Cxx75-xxPD 5 MS-Cxx83-xPD 5 MS-Cxx74-PA 5 MS-C8477-HPG1 5 MS-C8477-PC 5 MS-C5321-FPE 5 MS-Cxx72-xxxPE 5 MS-Cxx62-xxxPE 5 MS-Cxx52-xxxPE 5 MS-Cxx66-xxxPE 5 MS-Cxx66-xxxGPE 5 MS-Cxx61-xxxPE 5 MS-Cxx67-xxxPE 5 MS-Cxx71-xxxPE 5 MS-Cxx41-xxxPE 5 MS-Cxx76-PE 5 MS-Cxx65-PE 5 MS-Cxx66-xxxG1 5 MS-Cxx62-xxxG1 5 MS-Cxx72-xxxG1 5 MS-CQxx31-xxxG1 5 MS-CQxx68-xxxG1 5 MS-CQxx72-xxxG1 5 MS-Nxxxx-NxE 5 MS-Nxxxx-xxC 5 IP security cameras 5 MS-Nxxxx-xxE 5 MS-Nxxxx-xxG 5 MS-Nxxxx-xxH 5 MS-Nxxxx-xxT 5 PMC8266-FPE 5 PMC8266-FGPE 5 PM3322-E 5 TS4466-X4RIPG1 5
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-32644

    Milesight Cameras Use of Hard-coded Cryptographic Key

    Specific firmware versions of Milesight AIOT cameras use SSL certificates with default private keys.

    Milesight MS-Cxx66-xxxGPE MS-Nxxxx-xxG TS5510-GH
  • Critical 9.1
    CVE-2024-36391

    MileSight DeviceHub - CWE-320: Key Management Errors

    MileSight DeviceHub - CWE-320: Key Management Errors may allow Authentication Bypass and Man-In-The-Middle Traffic

    Milesight DeviceHub
  • Critical 9.8
    CVE-2024-36389

    MileSight DeviceHub - CWE-330 Use of Insufficiently Random Values

    MileSight DeviceHub - CWE-330 Use of Insufficiently Random Values may allow Authentication Bypass

    Milesight DeviceHub
  • Critical 10.0
    CVE-2024-36388

    MileSight DeviceHub - CWE-305 Missing Authentication for Critical Function

    MileSight DeviceHub - CWE-305 Missing Authentication for Critical Function

    Milesight DeviceHub
  • Critical 9.8
    CVE-2024-27776

    MileSight DeviceHub - CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

    MileSight DeviceHub - CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') may allow Unauthenticated RCE

    Milesight DeviceHub
  • Critical 9.8
    CVE-2023-23902

    A buffer overflow vulnerability exists in the uhttpd login functionality of Milesight UR32L v32.3.0.5. A specially craf…

    Milesight UR32L
  • Critical 9.8
    CVE-2023-30466

    Authentication Bypass Vulnerability in Milesight Network Video Recorder (NVR)

    This vulnerability exists in Milesight 4K/H.265 Series NVR models (MS-Nxxxx-xxG, MS-Nxxxx-xxE, MS-Nxxxx-xxT, MS-Nxxxx-xxH and MS-Nxxxx-xxC), due to a weak password reset mechanism at the Milesight NVR web-based management interface. A remote attacker could ex…

    Milesight NVR MS-Nxxxx-xxG NVR MS-Nxxxx-xxT NVR MS-Nxxxx-xxC