CVE-2023-23907

Milesight VPN / MilesightVPN (v2.0.2) has a directory traversal vulnerability in the server.js start path handling. TALOS-2023-1702 describes an unauthenticated path traversal: unvalidated construction of realPath (path.join(__dirname, '../'+pathname)) can allow reading arbitrary files via crafte...

CVE-2023-24497

Milesight VPN v2.0.2 contains cross-site scripting (XSS) vulnerabilities in the requestHandlers.js detail_device flow (CVE-2023-24497). Talos documents that XSS is introduced when a device is registered via Device_Auth, with user-controlled data stored in the device table (notably the remote_subn...

CVE-2023-24496

Milesight VPN v2.0.2 is affected by cross-site scripting in the Device_Auth flow. Talos documents CVE-2023-24496 (XSS via device_name stored in device.name) and CVE-2023-24497 (XSS via subnet stored in device.remote_subnet). An attacker can register a device with crafted inputs, which are stored ...

CVE-2023-22371

CVE-2023-22371 is an OS command-injection vulnerability in Milesight VPN v2.0.2, exposed via MilesightVPN liburvpn.so create_private_key used during /Device_Auth. An attacker who obtains a valid authorization code can trigger the vulnerability by sending crafted data to the API; the code path eve...

CVE-2023-22371

An os command injection vulnerability exists in the liburvpn.so createprivatekey functionality of Milesight VPN v2.0.2. A specially-crafted network request can lead to command execution. An attacker can send a malicious packet to trigger this vulnerability...

CVE-2023-24496

Cross-site scripting xss vulnerabilities exist in the requestHandlers.js detaildevice functionality of Milesight VPN v2.0.2. A specially-crafted HTTP request can lead to arbitrary Javascript code injection. An attacker can send an HTTP request to trigger these vulnerabilities.This XSS is exploite...

CVE-2023-24497

Cross-site scripting xss vulnerabilities exist in the requestHandlers.js detaildevice functionality of Milesight VPN v2.0.2. A specially-crafted HTTP request can lead to arbitrary Javascript code injection. An attacker can send an HTTP request to trigger these vulnerabilities.This XSS is exploite...

CVE-2023-24497

Cross-site scripting xss vulnerabilities exist in the requestHandlers.js detaildevice functionality of Milesight VPN v2.0.2. A specially-crafted HTTP request can lead to arbitrary Javascript code injection. An attacker can send an HTTP request to trigger these vulnerabilities.This XSS is exploite...

CVE-2023-24496

Cross-site scripting xss vulnerabilities exist in the requestHandlers.js detaildevice functionality of Milesight VPN v2.0.2. A specially-crafted HTTP request can lead to arbitrary Javascript code injection. An attacker can send an HTTP request to trigger these vulnerabilities.This XSS is exploite...

CVE-2023-22319: Improper Neutralization of Special Elements used in an SQL Command

A sql injection vulnerability exists in the requestHandlers.js LoginAuth functionality of Milesight VPN v2.0.2. A specially-crafted network request can lead to authentication bypass. An attacker can send a malicious packet to trigger this vulnerability...

CVE-2023-23907: Improper Limitation of a Pathname to a Restricted Directory

A directory traversal vulnerability exists in the server.js start functionality of Milesight VPN v2.0.2. A specially-crafted network request can lead to arbitrary file read. An attacker can send a network request to trigger this vulnerability...

CVE-2023-22371: Improper Neutralization of Special Elements used in a Command

An os command injection vulnerability exists in the liburvpn.so createprivatekey functionality of Milesight VPN v2.0.2. A specially-crafted network request can lead to command execution. An attacker can send a malicious packet to trigger this vulnerability...

CVE-2023-24497: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

Cross-site scripting xss vulnerabilities exist in the requestHandlers.js detaildevice functionality of Milesight VPN v2.0.2. A specially-crafted HTTP request can lead to arbitrary Javascript code injection. An attacker can send an HTTP request to trigger these vulnerabilities.This XSS is exploite...

CVE-2023-24496: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

Cross-site scripting xss vulnerabilities exist in the requestHandlers.js detaildevice functionality of Milesight VPN v2.0.2. A specially-crafted HTTP request can lead to arbitrary Javascript code injection. An attacker can send an HTTP request to trigger these vulnerabilities.This XSS is exploite...

PT-2023-19293

Name of the Vulnerable Software and Affected Versions Milesight VPN version 2.0.2 Description A directory traversal issue exists in the server.js start functionality, allowing a specially-crafted network request to lead to arbitrary file read. An attacker can send a network request to trigger thi...

PT-2023-18465

Name of the Vulnerable Software and Affected Versions Milesight VPN version 2.0.2 Description An os command injection issue exists in the liburvpn.so create private key functionality. A specially-crafted network request can lead to command execution. An attacker can send a malicious packet to...

PT-2023-19643

Name of the Vulnerable Software and Affected Versions Milesight VPN version 2.0.2 Description Cross-site scripting xss vulnerabilities exist in the requestHandlers.js detail device functionality. A specially-crafted HTTP request can lead to arbitrary Javascript code injection. An attacker can sen...

PT-2023-18721 · Milesight · Milesight Vpn

Name of the Vulnerable Software and Affected Versions: Milesight VPN version 2.0.2 Description: An authentication bypass issue exists in the requestHandlers.js verifyToken functionality. A specially-crafted network request can lead to authentication bypass, allowing an attacker to send a network...

PT-2023-19642 · Milesight · Milesight Vpn

Name of the Vulnerable Software and Affected Versions: Milesight VPN version 2.0.2 Description: Cross-site scripting xss vulnerabilities exist in the requestHandlers.js detail device functionality. A specially-crafted HTTP request can lead to arbitrary Javascript code injection. An attacker can...

Milesight VPN security vulnerability

Milesight VPN is a web-based VPN monitoring and management platform from China-based Milesight. A security vulnerability exists in Milesight VPN v2.0.2. An attacker can exploit this vulnerability to cause arbitrary Javascript code injection via a specially crafted HTTP request...