CVE-2016-2360

Milesight IP security cameras (through 2016-11-14) have a default root password in /etc/shadow that is the same across different customers’ installations. Connected records corroborate this issue across multiple sources (Red Hat, CNVD, CVE databases) and describe the credential issue as a default...

CVE-2016-2357

Milesight IP security cameras (up to 2016-11-14) contain a hardcoded SSL private key stored in the /etc/config directory. The root cause is a hardcoded SSL private key, leading to potential compromise of confidentiality, integrity, and availability of TLS communications. The provided documents do...

CVE-2016-2356

CVE-2016-2356 affects Milesight IP security cameras (through 2016-11-14). The vulnerability is a buffer overflow in the web application triggered by a long username or password, reported consistently across NVD/Red Hat/CNVD entries. Impact details in sources indicate potential memory corruption; ...

CVE-2016-2358

CVE-2016-2358 affects Milesight IP security cameras up to 2016-11-14, which ship with a default set of 10 privileged accounts using hardcoded credentials. If the customer has not configured 10 actual user accounts, these default accounts remain accessible, enabling potential unauthorized access.

CVE-2016-2359

CVE-2016-2359 concerns Milesight IP security cameras. The linked Red Hat/CNVD/OpenVAS entries describe an authentication bypass vulnerability that allows remote attackers to access protected resources by issuing a request for the unprotected vb.htm resource, affecting devices up to 2016-11-14. Th...