Vendor
Milesight
94 known vulnerabilities.
Products
94 results · Feed
-
High 8.1
A stack-based buffer overflow vulnerability exists in the urvpn_client http_connection_readcb functionality of Milesigh…
-
High 7.2
Two OS command injection vulnerabilities exist in the zebra vlan_name functionality of Milesight UR32L v32.3.0.5. A spe…
-
High 7.2
Two OS command injection vulnerabilities exist in the zebra vlan_name functionality of Milesight UR32L v32.3.0.5. A spe…
-
High 8.2
Milesight NCR/Camera Authentication Bypass
Milesight NCR/camera version 71.8.0.6-r5 allows authentication bypass through an unspecified method.
-
Medium 5.3
Milesight NCR/Camera CWE-200: Exposure of Sensitive Information
Milesight NCR/camera version 71.8.0.6-r5 discloses sensitive information through an unspecified request.
-
High 7.5
Milesight NCR/Camera CWE-522: Insufficiently Protected Credentials
Milesight NCR/camera version 71.8.0.6-r5 exposes credentials through an unspecified request.
-
High 7.5
Improper Authorization Vulnerability in Milesight Network Video Recorder (NVR)
This vulnerability exists in Milesight 4K/H.265 Series NVR models (MS-Nxxxx-xxG, MS-Nxxxx-xxE, MS-Nxxxx-xxT, MS-Nxxxx-xxH and MS-Nxxxx-xxC), due to improper authorization at the Milesight NVR web-based management interface. A remote attacker could exploit thi…
-
Critical 9.8
Authentication Bypass Vulnerability in Milesight Network Video Recorder (NVR)
This vulnerability exists in Milesight 4K/H.265 Series NVR models (MS-Nxxxx-xxG, MS-Nxxxx-xxE, MS-Nxxxx-xxT, MS-Nxxxx-xxH and MS-Nxxxx-xxC), due to a weak password reset mechanism at the Milesight NVR web-based management interface. A remote attacker could ex…
-
High 7.5
Vulnerability in Milesight Video Management Systems (VMS)
This vulnerability exists in Milesight Video Management Systems (VMS), all firmware versions prior to 40.7.0.79-r1, due to improper input handling at camera’s web-based management interface. A remote attacker could exploit this vulnerability by sending a spec…
-
Unscored —
Milesight IP security cameras through 2016-11-14 have a hardcoded SSL private key under the /etc/config directory.
-
Unscored —
Milesight IP security cameras through 2016-11-14 have a buffer overflow in a web application via a long username or pas…
-
Unscored —
Milesight IP security cameras through 2016-11-14 allow remote attackers to bypass authentication and access a protected…
-
Unscored —
Milesight IP security cameras through 2016-11-14 have a default set of 10 privileged accounts with hardcoded credential…
-
Unscored —
Milesight IP security cameras through 2016-11-14 have a default root password in /etc/shadow that is the same across di…