974 matches found
Milesight Routers - Information Disclosure
A critical security vulnerability has been identified in Milesight Industrial Cellular Routers, compromising the security of sensitive credentials and permitting unauthorized access. This vulnerability stems from a misconfiguration that results in directory listing being enabled on the router...
CVE-2023-43261
CVE-2023-43261 - PoC Milesightルーターの重大な脆弱性：機密情報の漏えいと不正アクセスを可能にする 日付: 2023年10月1日 製品ベンダー: Milesight 旧社名: Xiamen Ursalink Technology Co., Ltd. 影響を受ける製品: UR5X、UR32L、UR32、UR35、UR41。その他の産業用セルラールーターも影響を受ける可能性があります。 影響を受けるファームウェア:...
CVE-2026-29988
A cleartext transmission of sensitive information vulnerability in the NFC interface of multiple Milesight IoT device models running affected firmware versions allows an unauthenticated attacker with physical proximity to retrieve LoRaWAN ABP NwkSKey and AppSKey values and D2D keys via an NFC rea...
CVE-2026-29988
A cleartext transmission of sensitive information vulnerability in the NFC interface of multiple Milesight IoT device models running affected firmware versions allows an unauthenticated attacker with physical proximity to retrieve LoRaWAN ABP NwkSKey and AppSKey values and D2D keys via an NFC rea...
CVE-2026-29988
Milesight IoT devices (multiple models, affected firmware versions) are vulnerable to cleartext transmission of sensitive information through the NFC interface. An unauthenticated attacker with physical proximity can read LoRaWAN ABP NwkSKey , AppSKey , and D2D keys via a simple NFC read operatio...
EUVD-2026-66229
A cleartext transmission of sensitive information vulnerability in the NFC interface of multiple Milesight IoT device models running affected firmware versions allows an unauthenticated attacker with physical proximity to retrieve LoRaWAN ABP NwkSKey and AppSKey values and D2D keys via an NFC rea...
CVE-2026-29988
A cleartext transmission of sensitive information vulnerability in the NFC interface of multiple Milesight IoT device models running affected firmware versions allows an unauthenticated attacker with physical proximity to retrieve LoRaWAN ABP NwkSKey and AppSKey values and D2D keys via an NFC rea...
EUVD-2026-66228
duplicate record...
PT-2026-81924
A cleartext transmission of sensitive information vulnerability in the NFC interface of multiple Milesight IoT device models running affected firmware versions allows an unauthenticated attacker with physical proximity to retrieve LoRaWAN ABP NwkSKey and AppSKey values and D2D keys via an NFC rea...
CVE-2026-29988: Cleartext Transmission of Sensitive Information
A cleartext transmission of sensitive information vulnerability in the NFC interface of multiple Milesight IoT device models running affected firmware versions allows an unauthenticated attacker with physical proximity to retrieve LoRaWAN ABP NwkSKey and AppSKey values and D2D keys via an NFC rea...
PT-2026-81925
A cleartext transmission of sensitive information vulnerability in the NFC interface of multiple Milesight IoT device models running affected firmware versions allows an unauthenticated attacker with physical proximity to retrieve LoRaWAN ABP NwkSKey and AppSKey values and D2D keys via an NFC rea...
CVE-2026-32644
Specific firmware versions of Milesight AIOT cameras use SSL certificates with default private keys...
CVE-2026-32649
A command injection vulnerability exists in the web server of specific firmware versions of Milesight cameras...
CVE-2026-27785
Specific firmware versions of Milesight AIOT camera firmware contain hard-coded credentials...
CVE-2026-20766
An out-of-bounds memory access vulnerability exists in specific firmware versions of Milesight AIOT cameras...
CVE-2026-28747
A weak key generation vulnerability exists in specific firmware versions of Milesight AIOT cameras allows authorization to be bypassed...
CVE-2026-20766
An out-of-bounds memory access vulnerability exists in specific firmware versions of Milesight AIOT cameras...
CVE-2026-32644
Specific firmware versions of Milesight AIOT cameras use SSL certificates with default private keys...