Description
This vulnerability exists in Milesight 4K/H.265 Series NVR models (MS-Nxxxx-xxG, MS-Nxxxx-xxE, MS-Nxxxx-xxT, MS-Nxxxx-xxH and MS-Nxxxx-xxC), due to a weak password reset mechanism at the Milesight NVR web-based management interface. A remote attacker could exploit this vulnerability by sending a specially crafted http requests on the targeted device.
Successful exploitation of this vulnerability could allow remote attacker to account takeover on the targeted device.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Milesight | NVR MS-Nxxxx-xxG | 77.X – < 77.9.0.18-r2 | 77.9.0.18-r2 |
| Milesight | NVR MS-Nxxxx-xxE | 75.X – < 75.9.0.18-r2 | 75.9.0.18-r2 |
| Milesight | NVR MS-Nxxxx-xxT | 72.X – < 72.9.0.18-r2 | 72.9.0.18-r2 |
| Milesight | NVR MS-Nxxxx-xxH | 71.X – < 71.9.0.18-r2 | 71.9.0.18-r2 |
| Milesight | NVR MS-Nxxxx-xxC | 73.X – < 73.9.0.18-r2 | 73.9.0.18-r2 |