CVE-2023-30466

🗓️ 28 Apr 2023 10:06:26Reported by CERT-InType

Milesight 4K/H.265 NVR models vulnerable to account takeover

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2023-30466	28 Apr 202314:27	–	circl
CNNVD	Milesight 4K/H.265 Series 授权问题漏洞	28 Apr 202300:00	–	cnnvd
Cvelist	CVE-2023-30466 Authentication Bypass Vulnerability in Milesight Network Video Recorder (NVR)	28 Apr 202310:06	–	cvelist
EUVD	EUVD-2023-34881	3 Oct 202520:07	–	euvd
NVD	CVE-2023-30466	28 Apr 202311:15	–	nvd
OSV	CVE-2023-30466	28 Apr 202311:15	–	osv
Prion	Design/Logic Flaw	28 Apr 202311:15	–	prion
Positive Technologies	PT-2023-7824 · Milesight · Milesight 4K/H.265 Series Nvr	28 Apr 202300:00	–	ptsecurity
RedhatCVE	CVE-2023-30466	23 May 202502:49	–	redhatcve
Vulnrichment	CVE-2023-30466 Authentication Bypass Vulnerability in Milesight Network Video Recorder (NVR)	28 Apr 202310:06	–	vulnrichment

NVD

Node

milesight ms-n5008-uc_firmwareRange<73.9.0.18-r2

AND

milesight ms-n5008-ucMatch-

Node

milesight ms-n1008-unc_firmwareRange<73.9.0.18-r2

AND

milesight ms-n1008-uncMatch-

Node

milesight ms-n1008-uc_firmwareRange<73.9.0.18-r2

AND

milesight ms-n1008-ucMatch-

Node

milesight ms-n1004-uc_firmwareRange<73.9.0.18-r2

AND

milesight ms-n1004-ucMatch-

Node

milesight ms-n5016-e_firmwareRange<75.9.0.18-r2

AND

milesight ms-n5016-eMatch-

Node

milesight ms-n5008-e_firmwareRange<75.9.0.18-r2

AND

milesight ms-n5008-eMatch-

Node

milesight ms-n7016-uh_firmwareRange<71.9.0.18-r2

AND

milesight ms-n7016-uhMatch-

Node

milesight ms-n7032-uh_firmwareRange<71.9.0.18-r2

AND

milesight ms-n7032-uhMatch-

Node

milesight ms-n8064-uh_firmwareRange<71.9.0.18-r2

AND

milesight ms-n8064-uhMatch-

Node

milesight ms-n8032-uh_firmwareRange<71.9.0.18-r2

AND

milesight ms-n8032-uhMatch-

Node

milesight ms-n1004-upc_firmwareRange<73.9.0.18-r2

AND

milesight ms-n1004-upcMatch-

Node

milesight ms-n1008-upc_firmwareRange<73.9.0.18-r2

AND

milesight ms-n1008-upcMatch-

Node

milesight ms-n1008-unpc_firmwareRange<73.9.0.18-r2

AND

milesight ms-n1008-unpcMatch-

Node

milesight ms-n5008-upc_firmwareRange<73.9.0.18-r2

AND

milesight ms-n5008-upcMatch-

Node

milesight ms-n5016-pe_firmwareRange<75.9.0.18-r2

AND

milesight ms-n5016-peMatch-

Node

milesight ms-n5008-pe_firmwareRange<75.9.0.18-r2

AND

milesight ms-n5008-peMatch-

Node

milesight ms-n7016-uph_firmwareRange<71.9.0.18-r2

AND

milesight ms-n7016-uphMatch-

Node

milesight ms-n7032-uph_firmwareRange<71.9.0.18-r2

AND

milesight ms-n7032-uphMatch-

Node

milesight ms-n7048-uph_firmwareRange<71.9.0.18-r2

AND

milesight ms-n7048-uphMatch-

Node

milesight ms-nxxxx-xxg_firmwareRange<77.9.0.18-r2

milesight ms-nxxxx-xxt_firmwareRange<72.9.0.18-r2

[
  {
    "defaultStatus": "unaffected",
    "product": "NVR MS-Nxxxx-xxG",
    "vendor": "Milesight",
    "versions": [
      {
        "lessThan": "77.9.0.18-r2",
        "status": "affected",
        "version": "77.X",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "NVR MS-Nxxxx-xxE",
    "vendor": "Milesight",
    "versions": [
      {
        "lessThan": "75.9.0.18-r2",
        "status": "affected",
        "version": "75.X",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "NVR MS-Nxxxx-xxT",
    "vendor": "Milesight",
    "versions": [
      {
        "lessThan": "72.9.0.18-r2",
        "status": "affected",
        "version": "72.X",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "NVR MS-Nxxxx-xxH ",
    "vendor": "Milesight",
    "versions": [
      {
        "lessThan": "71.9.0.18-r2",
        "status": "affected",
        "version": "71.X",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "NVR MS-Nxxxx-xxC",
    "vendor": "Milesight",
    "versions": [
      {
        "lessThan": "73.9.0.18-r2",
        "status": "affected",
        "version": "73.X",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
cert-in	www.cert-in.org.in/s2cMainServlet

21 Nov 2024 08:00Current

9.5High risk

Vulners AI Score9.5

CVSS 3.19.8

EPSS0.00801

SSVC

CWE-640