Lucene search

CERT-InCVELIST:CVE-2023-30467

HistoryApr 28, 2023 - 10:12 a.m.

CVE-2023-30467 Improper Authorization Vulnerability in Milesight Network Video Recorder (NVR)

2023-04-2810:12:11

CWE-285

CERT-In

www.cve.org

vulnerability

milesight nvr

authorization

h.265

web-based

management interface

remote attacker

http requests

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

9.4

Confidence

High

EPSS

0.003

Percentile

68.9%

JSON

This vulnerability exists in Milesight 4K/H.265 Series NVR models (MS-Nxxxx-xxG, MS-Nxxxx-xxE, MS-Nxxxx-xxT, MS-Nxxxx-xxH and MS-Nxxxx-xxC), due to improper authorization at the Milesight NVR web-based management interface. A remote attacker could exploit this vulnerability by sending a specially crafted http requests on the targeted device.

Successful exploitation of this vulnerability could allow remote attacker to perform unauthorized activities on the targeted device.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "NVR MS-Nxxxx-xxG",
    "vendor": "Milesight",
    "versions": [
      {
        "lessThan": "77.9.0.18-r2",
        "status": "affected",
        "version": "77.X",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "NVR MS-Nxxxx-xxE",
    "vendor": "Milesight",
    "versions": [
      {
        "lessThan": "75.9.0.18-r2",
        "status": "affected",
        "version": "75.X",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "NVR MS-Nxxxx-xxT",
    "vendor": "Milesight",
    "versions": [
      {
        "lessThan": "72.9.0.18-r2",
        "status": "affected",
        "version": "72.X",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "NVR MS-Nxxxx-xxH ",
    "vendor": "Milesight",
    "versions": [
      {
        "lessThan": "71.9.0.18-r2",
        "status": "affected",
        "version": "71.X",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "NVR MS-Nxxxx-xxC",
    "vendor": "Milesight",
    "versions": [
      {
        "lessThan": "73.9.0.18-r2",
        "status": "affected",
        "version": "73.X",
        "versionType": "custom"
      }
    ]
  }
]

References

www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2023-0121

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

9.4

Confidence

High

EPSS

0.003

Percentile

68.9%

JSON

Related for CVELIST:CVE-2023-30467