Skip to content
OpenAdvisories

Vendor

Milestone Systems

5 known vulnerabilities.

Products

XProtect VMS 4 XProtect Management Server 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.3
    CVE-2025-0836

    XProtect MIP API Missing Authorization

    Missing Authorization vulnerability in Milestone Systems XProtect VMS allows users with read-only access to Management Server to have full read/write access to MIP Webhooks API.

    Milestone Systems XProtect VMS
  • Medium 5.5
    CVE-2025-1688

    System configuration password reset

    Milestone Systems has discovered a security vulnerability in Milestone XProtect installer that resets system configuration password after the upgrading from older versions using specific installers. The system configuration password is an additional, optional…

    Milestone Systems XProtect VMS
  • Medium 6.7
    CVE-2024-3506

    Camera Driver possible Buffer Overflow

    A possible buffer overflow in selected cameras' drivers from XProtect Device Pack can allow an attacker with access to internal network to execute commands on Recording Server under strict conditions.

    Milestone Systems XProtect VMS