EUVD-2022-42440

Malicious code in bioql PyPI...

CVE-2022-3001

This vulnerability exists in Milesight Video Management Systems VMS, all firmware versions prior to 40.7.0.79-r1, due to improper input handling at camera’s web-based management interface. A remote attacker could exploit this vulnerability by sending a specially crafted http request on the target...

Input validation

This vulnerability exists in Milesight Video Management Systems VMS, all firmware versions prior to 40.7.0.79-r1, due to improper input handling at camera’s web-based management interface. A remote attacker could exploit this vulnerability by sending a specially crafted http request on the target...

CVE-2022-3001

Milesight VMS CVE-2022-3001 affects all firmware versions prior to 40.7.0.79-r1. Root cause: improper input handling in the camera’s web-based management interface. Impact: remote attacker can trigger a Denial of Service by sending a specially crafted HTTP request to the targeted network camera. ...

PT-2022-19966 · Milesight · Milesight Video Management Systems

Name of the Vulnerable Software and Affected Versions: Milesight Video Management Systems VMS versions prior to 40.7.0.79-r1 Description: The issue is caused by improper input handling at the camera's web-based management interface. A remote attacker could exploit this by sending a specially...

CVE-2022-3001

This vulnerability exists in Milesight Video Management Systems VMS, all firmware versions prior to 40.7.0.79-r1, due to improper input handling at camera’s web-based management interface. A remote attacker could exploit this vulnerability by sending a specially crafted http request on the target...