CVE-2023-30467

The CVE-2023-30467 entry affects Milesight 4K/H.265 Series NVR models (MS-Nxxxx-xxG/E/T/H/C). Root cause: improper authorization on the Milesight NVR web-based management interface, allowing a remote attacker to send specially crafted HTTP requests to the targeted device. Impact as described: una...

CVE-2023-30467 Improper Authorization Vulnerability in Milesight Network Video Recorder (NVR)

This vulnerability exists in Milesight 4K/H.265 Series NVR models MS-Nxxxx-xxG, MS-Nxxxx-xxE, MS-Nxxxx-xxT, MS-Nxxxx-xxH and MS-Nxxxx-xxC, due to improper authorization at the Milesight NVR web-based management interface. A remote attacker could exploit this vulnerability by sending a specially...

CVE-2023-30467 Improper Authorization Vulnerability in Milesight Network Video Recorder (NVR)

This vulnerability exists in Milesight 4K/H.265 Series NVR models MS-Nxxxx-xxG, MS-Nxxxx-xxE, MS-Nxxxx-xxT, MS-Nxxxx-xxH and MS-Nxxxx-xxC, due to improper authorization at the Milesight NVR web-based management interface. A remote attacker could exploit this vulnerability by sending a specially...

CVE-2023-30466

CVE-2023-30466 affects Milesight 4K/H.265 Series NVR models (MS-Nxxxx-xxG/E/T/H/C). The root cause is a weak password-reset mechanism in the NVR web-based management interface, enabling a remote attacker to perform account takeover via specially crafted HTTP requests. The connected sources provid...

CVE-2023-30466 Authentication Bypass Vulnerability in Milesight Network Video Recorder (NVR)

This vulnerability exists in Milesight 4K/H.265 Series NVR models MS-Nxxxx-xxG, MS-Nxxxx-xxE, MS-Nxxxx-xxT, MS-Nxxxx-xxH and MS-Nxxxx-xxC, due to a weak password reset mechanism at the Milesight NVR web-based management interface. A remote attacker could exploit this vulnerability by sending a...

CVE-2023-30466 Authentication Bypass Vulnerability in Milesight Network Video Recorder (NVR)

This vulnerability exists in Milesight 4K/H.265 Series NVR models MS-Nxxxx-xxG, MS-Nxxxx-xxE, MS-Nxxxx-xxT, MS-Nxxxx-xxH and MS-Nxxxx-xxC, due to a weak password reset mechanism at the Milesight NVR web-based management interface. A remote attacker could exploit this vulnerability by sending a...

PT-2023-7824 · Milesight · Milesight 4K/H.265 Series Nvr

Name of the Vulnerable Software and Affected Versions: Milesight 4K/H.265 Series NVR models MS-Nxxxx-xxG, MS-Nxxxx-xxE, MS-Nxxxx-xxT, MS-Nxxxx-xxH and MS-Nxxxx-xxC Description: The issue exists due to a weak password reset mechanism at the Milesight NVR web-based management interface. A remote...

PT-2023-22707 · Milesight · Milesight 4K/H.265 Series Nvr

Name of the Vulnerable Software and Affected Versions: Milesight 4K/H.265 Series NVR models MS-Nxxxx-xxG, MS-Nxxxx-xxE, MS-Nxxxx-xxT, MS-Nxxxx-xxH and MS-Nxxxx-xxC affected versions not specified Description: This issue is due to improper authorization at the Milesight NVR web-based management...

Milesight 4K/H.265 Series 授权问题漏洞

Milesight 4K/H.265 Series is a series of network cameras from the Chinese company Milesight. The Milesight 4K/H.265 Series suffers from a security vulnerability that stems from a weak password reset mechanism. A remote attacker could exploit the vulnerability to take over an account by sending a...

Milesight 4K/H.265 Series 安全漏洞

Milesight 4K/H.265 Series is a series of network cameras from the Chinese company Milesight. A security vulnerability exists in the Milesight 4K/H.265 Series that stems from the presence of improper authorization. A remote attacker could use this vulnerability to perform unauthorized activities b...

Arbitrary Code Execution Vulnerability in Various Apple Products

The Milesight UR32L is a Lite industrial cellular router from Milesight. A command injection vulnerability exists in the Milesight UR32L zebra vlanname function, which can be exploited by an attacker to execute arbitrary commands on the system...

Mozilla Firefox 安全漏洞

The Milesight UR32L is a Lite industrial cellular router from Milesight. A command injection vulnerability exists in the Milesight UR32L zebra vlanname function, which can be exploited by an attacker to execute arbitrary commands on the system...

CVE-2022-3001

This vulnerability exists in Milesight Video Management Systems VMS, all firmware versions prior to 40.7.0.79-r1, due to improper input handling at camera’s web-based management interface. A remote attacker could exploit this vulnerability by sending a specially crafted http request on the target...

CVE-2022-3001

This vulnerability exists in Milesight Video Management Systems VMS, all firmware versions prior to 40.7.0.79-r1, due to improper input handling at camera’s web-based management interface. A remote attacker could exploit this vulnerability by sending a specially crafted http request on the target...

Input validation

This vulnerability exists in Milesight Video Management Systems VMS, all firmware versions prior to 40.7.0.79-r1, due to improper input handling at camera’s web-based management interface. A remote attacker could exploit this vulnerability by sending a specially crafted http request on the target...

CVE-2022-3001 Vulnerability in Milesight Video Management Systems (VMS)

This vulnerability exists in Milesight Video Management Systems VMS, all firmware versions prior to 40.7.0.79-r1, due to improper input handling at camera’s web-based management interface. A remote attacker could exploit this vulnerability by sending a specially crafted http request on the target...

CVE-2022-3001

Milesight VMS CVE-2022-3001 affects all firmware versions prior to 40.7.0.79-r1. Root cause: improper input handling in the camera’s web-based management interface. Impact: remote attacker can trigger a Denial of Service by sending a specially crafted HTTP request to the targeted network camera. ...

Milesight Video Management Systems 输入验证错误漏洞

Milesight Video Management Systems is a video management software from the Chinese company Milesight. A security vulnerability in Milesight Video Management Systems VMS versions prior to 40.7.0.79-r1, which stems from improper handling of input in the web-based management interface, can be...

PT-2022-19966 · Milesight · Milesight Video Management Systems

Name of the Vulnerable Software and Affected Versions: Milesight Video Management Systems VMS versions prior to 40.7.0.79-r1 Description: The issue is caused by improper input handling at the camera's web-based management interface. A remote attacker could exploit this by sending a specially...

CVE-2022-3001

This vulnerability exists in Milesight Video Management Systems VMS, all firmware versions prior to 40.7.0.79-r1, due to improper input handling at camera’s web-based management interface. A remote attacker could exploit this vulnerability by sending a specially crafted http request on the target...