Skip to content
OpenAdvisories

Vendor

Milesight

94 known vulnerabilities.

Products

UR32L 64 DeviceHub 6 MilesightVPN 6 MS-Cxx63-PD 5 MS-Cxx64-xPD 5 MS-Cxx73-xPD 5 MS-Cxx75-xxPD 5 MS-Cxx83-xPD 5 MS-Cxx74-PA 5 MS-C8477-HPG1 5 MS-C8477-PC 5 MS-C5321-FPE 5 MS-Cxx72-xxxPE 5 MS-Cxx62-xxxPE 5 MS-Cxx52-xxxPE 5 MS-Cxx66-xxxPE 5 MS-Cxx66-xxxGPE 5 MS-Cxx61-xxxPE 5 MS-Cxx67-xxxPE 5 MS-Cxx71-xxxPE 5 MS-Cxx41-xxxPE 5 MS-Cxx76-PE 5 MS-Cxx65-PE 5 MS-Cxx66-xxxG1 5 MS-Cxx62-xxxG1 5 MS-Cxx72-xxxG1 5 MS-CQxx31-xxxG1 5 MS-CQxx68-xxxG1 5 MS-CQxx72-xxxG1 5 MS-Nxxxx-NxE 5 MS-Nxxxx-xxC 5 IP security cameras 5 MS-Nxxxx-xxE 5 MS-Nxxxx-xxG 5 MS-Nxxxx-xxH 5 MS-Nxxxx-xxT 5 PMC8266-FPE 5 PMC8266-FGPE 5 PM3322-E 5 TS4466-X4RIPG1 5
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Medium 6.8
    CVE-2026-32649

    Milesight Cameras OS Command Injection

    A command injection vulnerability exists in the web server of specific firmware versions of Milesight cameras.

    Milesight MS-Cxx66-xxxGPE MS-Nxxxx-xxG TS5510-GH
  • Medium 6.8
    CVE-2025-4043

    Milesight UG65-868M-EA Improper Access Control for Volatile Memory Containing Boot Code

    An admin user can gain unauthorized write access to the /etc/rc.local file on the device, which is executed on a system boot.

    Milesight UG65-868M-EA
  • Medium 6.1
    CVE-2024-36392

    MileSight DeviceHub - CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

    MileSight DeviceHub - CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

    Milesight DeviceHub
  • Medium 6.5
    CVE-2023-23547

    A directory traversal vulnerability exists in the luci2-io file-export mib functionality of Milesight UR32L v32.3.0.5. …

    Milesight UR32L
  • Medium 4.7
    CVE-2023-24496

    Cross-site scripting (xss) vulnerabilities exist in the requestHandlers.js detail_device functionality of Milesight VPN…

    Milesight MilesightVPN
  • Medium 4.7
    CVE-2023-24497

    Cross-site scripting (xss) vulnerabilities exist in the requestHandlers.js detail_device functionality of Milesight VPN…

    Milesight MilesightVPN
  • Medium 4.2
    CVE-2023-23546

    A misconfiguration vulnerability exists in the urvpn_client functionality of Milesight UR32L v32.3.0.5. A specially-cra…

    Milesight UR32L
  • Medium 5.3
    CVE-2023-24505

    Milesight NCR/Camera CWE-200: Exposure of Sensitive Information

    Milesight NCR/camera version 71.8.0.6-r5 discloses sensitive information through an unspecified request.

    Milesight NCR/Camera