EUVD-2016-3440

Malware in sbrugna...

CVE-2016-2356

CVE-2016-2356 affects Milesight IP security cameras (through 2016-11-14). The vulnerability is a buffer overflow in the web application triggered by a long username or password, reported consistently across NVD/Red Hat/CNVD entries. Impact details in sources indicate potential memory corruption; ...

CVE-2016-2359

CVE-2016-2359 concerns Milesight IP security cameras. The linked Red Hat/CNVD/OpenVAS entries describe an authentication bypass vulnerability that allows remote attackers to access protected resources by issuing a request for the unprotected vb.htm resource, affecting devices up to 2016-11-14. Th...

CVE-2016-2358

CVE-2016-2358 affects Milesight IP security cameras up to 2016-11-14, which ship with a default set of 10 privileged accounts using hardcoded credentials. If the customer has not configured 10 actual user accounts, these default accounts remain accessible, enabling potential unauthorized access.

CVE-2016-2360

Milesight IP security cameras (through 2016-11-14) have a default root password in /etc/shadow that is the same across different customers’ installations. Connected records corroborate this issue across multiple sources (Red Hat, CNVD, CVE databases) and describe the credential issue as a default...

CVE-2016-2356: Buffer Copy without Checking Size of Input

Milesight IP security cameras through 2016-11-14 have a buffer overflow in a web application via a long username or password...

CVE-2016-2357: Use of Hard-coded Credentials

Milesight IP security cameras through 2016-11-14 have a hardcoded SSL private key under the /etc/config directory...

CVE-2016-2360: Use of Hard-coded Credentials

Milesight IP security cameras through 2016-11-14 have a default root password in /etc/shadow that is the same across different customers' installations...

CVE-2016-2359: Improper Authentication

Milesight IP security cameras through 2016-11-14 allow remote attackers to bypass authentication and access a protected resource by simultaneously making a request for the unprotected vb.htm resource...

PT-2019-7817

Name of the Vulnerable Software and Affected Versions Milesight IP security cameras versions prior to 2016-11-14 Description The issue concerns a hardcoded SSL private key located under the /etc/config directory. Recommendations For Milesight IP security cameras versions prior to 2016-11-14,...

PT-2019-7820

Name of the Vulnerable Software and Affected Versions Milesight IP security cameras versions prior to 2016-11-14 Description The issue concerns a default root password in /etc/shadow that is identical across different installations of the affected cameras. Recommendations For Milesight IP securit...

CVE-2016-2358: Use of Hard-coded Credentials

Milesight IP security cameras through 2016-11-14 have a default set of 10 privileged accounts with hardcoded credentials. They are accessible if the customer has not configured 10 actual user accounts...

PT-2019-7816

Name of the Vulnerable Software and Affected Versions Milesight IP security cameras versions prior to 2016-11-14 Description The issue is related to a buffer overflow in the web application of the cameras, which can be triggered by a long username or password. Recommendations For versions prior t...

PT-2019-7818

Name of the Vulnerable Software and Affected Versions Milesight IP security cameras versions prior to 2016-11-14 Description The issue concerns Milesight IP security cameras that have a default set of 10 privileged accounts with hardcoded credentials. These accounts are accessible if the customer...