Lucene search
HistoryMay 08, 2023 - 9:15 p.m.
CVE-2023-24505
milesight
ncr
camera
cve-2023-24505
sensitive information disclosure
security vulnerability
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
7.4 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
43.0%
Milesight NCR/camera version 71.8.0.6-r5 discloses sensitive information through an unspecified request.
Affected configurations
Node
milesightncr\/cameraMatch-
milesightncr\/camera_firmwareMatch71.8.0.6-r5
| CPE | Name | Operator | Version |
|---|---|---|---|
| milesight:ncr\/camera_firmware | milesight ncr/camera firmware | eq | 71.8.0.6-r5 |
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "NCR/Camera",
"vendor": "Milesight ",
"versions": [
{
"status": "affected",
"version": "All versions"
}
]
}
]Related
nvd
nvd
CVE-2023-24505
2023-05-08 21:15:10
cvelist
cvelist
prion
prion
Server side request forgery (ssrf)
2023-05-08 21:15:00
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
7.4 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
43.0%
Related for CVE-2023-24505