Milesight VPN 安全漏洞

Milesight VPN is a web-based VPN monitoring and management platform from China-based Milesight. A security vulnerability exists in Milesight VPN v2.0.2. An attacker can exploit this vulnerability to cause arbitrary Javascript code injection via a specially crafted HTTP request...

PT-2023-4165 · Milesight · Milesight Ur32L

Name of the Vulnerable Software and Affected Versions: Milesight UR32L version 32.3.0.5 Description: A buffer overflow vulnerability exists in the uhttpd login functionality, allowing remote code execution through a specially crafted network request. An attacker can exploit this issue by sending ...

Milesight VPN SQL注入漏洞

Milesight is a complete Artificial Intelligence Video Surveillance solution from China's StarZone IOT Milesight. A SQL injection vulnerability exists in Milesight VPN version v2.0.2. An attacker exploits the vulnerability to cause authentication bypass via a specially crafted web request...

Milesight VPN 路径遍历漏洞

Milesight VPN is a web-based VPN monitoring and management platform from Milesight. A path traversal vulnerability exists in Milesight VPN v2.0.2. An attacker can exploit this vulnerability to read arbitrary files via a specially crafted web request...

PT-2023-5069 · Milesight · Milesight Ur32L

Name of the Vulnerable Software and Affected Versions: Milesight UR32L version 32.3.0.5 Description: The issue is caused by multiple buffer overflow vulnerabilities in the vtysh ubus binary due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code...

Milesight UR32L libzebra.so bridge_group OS command injection vulnerability

Talos Vulnerability Report TALOS-2023-1698 Milesight UR32L libzebra.so bridgegroup OS command injection vulnerability July 6, 2023 CVE Number CVE-2023-22306 SUMMARY An OS command injection vulnerability exists in the libzebra.so bridgegroup functionality of Milesight UR32L v32.3.0.5. A specially...

Milesight UR32L eventcore access violation vulnerability

Talos Vulnerability Report TALOS-2023-1696 Milesight UR32L eventcore access violation vulnerability July 6, 2023 CVE Number CVE-2023-23571 SUMMARY An access violation vulnerability exists in the eventcore functionality of Milesight UR32L v32.3.0.5. A specially crafted network request can lead to...

Milesight UR32L vtysh_ubus toolsh_excute.constprop.1 OS command injection vulnerabilities

Talos Vulnerability Report TALOS-2023-1706 Milesight UR32L vtyshubus toolshexcute.constprop.1 OS command injection vulnerabilities July 6, 2023 CVE Number CVE-2023-24519,CVE-2023-24520 SUMMARY Two OS command injection vulnerability exist in the vtyshubus toolshexcute.constprop.1 functionality of...

Milesight UR32L zebra vlan_name OS command injection vulnerabilities

Talos Vulnerability Report TALOS-2023-1723 Milesight UR32L zebra vlanname OS command injection vulnerabilities July 6, 2023 CVE Number CVE-2023-25582,CVE-2023-25583 SUMMARY Two OS command injection vulnerabilities exist in the zebra vlanname functionality of Milesight UR32L v32.3.0.5. A specially...

Milesight UR32L ys_thirdparty check_system_user OS command injection vulnerability

Talos Vulnerability Report TALOS-2023-1711 Milesight UR32L ysthirdparty checksystemuser OS command injection vulnerability July 6, 2023 CVE Number CVE-2023-22365 SUMMARY An OS command injection vulnerability exists in the ysthirdparty checksystemuser functionality of Milesight UR32L v32.3.0.5. A...

Milesight UR32L urvpn_client http_connection_readcb stack-based buffer overflow vulnerability

Talos Vulnerability Report TALOS-2023-1718 Milesight UR32L urvpnclient httpconnectionreadcb stack-based buffer overflow vulnerability July 6, 2023 CVE Number CVE-2023-24019 SUMMARY A stack-based buffer overflow vulnerability exists in the urvpnclient httpconnectionreadcb functionality of Milesigh...

CVE-2023-32220

Milesight NCR/camera version 71.8.0.6-r5 allows authentication bypass through an unspecified method...

CVE-2023-32220

Milesight NCR/camera version 71.8.0.6-r5 allows authentication bypass through an unspecified method...

Authentication flaw

Milesight NCR/camera version 71.8.0.6-r5 allows authentication bypass through an unspecified method...

CVE-2023-32220 Milesight NCR/Camera Authentication Bypass

Milesight NCR/camera version 71.8.0.6-r5 allows authentication bypass through an unspecified method...

PT-2023-23667 · Milesight · Milesight Ncr/Camera

Name of the Vulnerable Software and Affected Versions: Milesight NCR/camera version 71.8.0.6-r5 Description: The issue allows authentication bypass through an unspecified method. Recommendations: For Milesight NCR/camera version 71.8.0.6-r5, at the moment, there is no information about a newer...

CVE-2023-32220

CVE-2023-32220 : Based on the provided documents, Milesight NCR/camera version 71.8.0.6-r5 is affected by an authentication bypass via an unspecified method. The NVD entry lists a base score of 9.8 (CRITICAL) under CVSS 3.1, with attack vector NETWORK, no privileges required, and user interaction...

Milesight 授权问题漏洞

Milesight is a complete artificial intelligence video surveillance solution from China-based Milesight. A security vulnerability exists in Milesight NCR/camera version 71.8.0.6-r5, which stems from a vulnerability that allows authentication to be bypassed via an unspecified method...

CVE-2023-32220 Milesight NCR/Camera Authentication Bypass

Milesight NCR/camera version 71.8.0.6-r5 allows authentication bypass through an unspecified method...

CVE-2023-32220

Milesight NCR/camera version 71.8.0.6-r5 allows authentication bypass through an unspecified method...