CVE-2016-2360

Milesight IP security cameras through 2016-11-14 have a default root password in /etc/shadow that is the same across different customers' installations...

CVE-2016-2356

Milesight IP security cameras through 2016-11-14 have a buffer overflow in a web application via a long username or password...

Authentication flaw

Milesight IP security cameras through 2016-11-14 allow remote attackers to bypass authentication and access a protected resource by simultaneously making a request for the unprotected vb.htm resource...

Buffer overflow

Milesight IP security cameras through 2016-11-14 have a buffer overflow in a web application via a long username or password...

Default credentials

Milesight IP security cameras through 2016-11-14 have a default root password in /etc/shadow that is the same across different customers' installations...

Hardcoded credentials

Milesight IP security cameras through 2016-11-14 have a default set of 10 privileged accounts with hardcoded credentials. They are accessible if the customer has not configured 10 actual user accounts...

Hardcoded credentials

Milesight IP security cameras through 2016-11-14 have a hardcoded SSL private key under the /etc/config directory...

CVE-2016-2357

Milesight IP security cameras (up to 2016-11-14) contain a hardcoded SSL private key stored in the /etc/config directory. The root cause is a hardcoded SSL private key, leading to potential compromise of confidentiality, integrity, and availability of TLS communications. The provided documents do...

CVE-2016-2357

Milesight IP security cameras through 2016-11-14 have a hardcoded SSL private key under the /etc/config directory...

CVE-2016-2356

Milesight IP security cameras through 2016-11-14 have a buffer overflow in a web application via a long username or password...

CVE-2016-2356

CVE-2016-2356 affects Milesight IP security cameras (through 2016-11-14). The vulnerability is a buffer overflow in the web application triggered by a long username or password, reported consistently across NVD/Red Hat/CNVD entries. Impact details in sources indicate potential memory corruption; ...

CVE-2016-2359

CVE-2016-2359 concerns Milesight IP security cameras. The linked Red Hat/CNVD/OpenVAS entries describe an authentication bypass vulnerability that allows remote attackers to access protected resources by issuing a request for the unprotected vb.htm resource, affecting devices up to 2016-11-14. Th...

CVE-2016-2359

Milesight IP security cameras through 2016-11-14 allow remote attackers to bypass authentication and access a protected resource by simultaneously making a request for the unprotected vb.htm resource...

CVE-2016-2358

CVE-2016-2358 affects Milesight IP security cameras up to 2016-11-14, which ship with a default set of 10 privileged accounts using hardcoded credentials. If the customer has not configured 10 actual user accounts, these default accounts remain accessible, enabling potential unauthorized access.

CVE-2016-2358

Milesight IP security cameras through 2016-11-14 have a default set of 10 privileged accounts with hardcoded credentials. They are accessible if the customer has not configured 10 actual user accounts...

CVE-2016-2360

Milesight IP security cameras (through 2016-11-14) have a default root password in /etc/shadow that is the same across different customers’ installations. Connected records corroborate this issue across multiple sources (Red Hat, CNVD, CVE databases) and describe the credential issue as a default...

CVE-2016-2360

Milesight IP security cameras through 2016-11-14 have a default root password in /etc/shadow that is the same across different customers' installations...

Milesight Network Cameras Default Credentials (HTTP)

Milesight Network Cameras use the default credentials admin:ms1234. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

Milesight Network Camera Detection

Detect Milesight Network Cameras. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.113230";...

MileSight camera default private key certificate vulnerability

MileSight camera is a network camera produced by Xiamen PulseVision Digital Technology Co. MileSight camera suffers from a default private key certificate vulnerability. Since all cameras share the same secret key, an attacker can exploit the vulnerability to launch a man-in-the-middle attack whe...