Milesight: Security Vulnerabilities
A directory traversal vulnerability exists in the server.js start functionality of Milesight VPN v2.0.2. A specially-crafted network request can lead to arbitrary file read. An attacker can send a network request to trigger this vulnerability.
CVSS Score
7.5
EPSS Score
0.002
Published
2023-07-06
A stack-based buffer overflow vulnerability exists in the libzebra.so.0.0.0 security_decrypt_password functionality of Milesight UR32L v32.3.0.5. A specially crafted HTTP request can lead to a buffer overflow. An authenticated attacker can send an HTTP request to trigger this vulnerability.
CVSS Score
8.8
EPSS Score
0.001
Published
2023-07-06
A stack-based buffer overflow vulnerability exists in the urvpn_client http_connection_readcb functionality of Milesight UR32L v32.3.0.5. A specially crafted network packet can lead to a buffer overflow. An attacker can send a malicious packet to trigger this vulnerability.
CVSS Score
8.1
EPSS Score
0.001
Published
2023-07-06
Cross-site scripting (xss) vulnerabilities exist in the requestHandlers.js detail_device functionality of Milesight VPN v2.0.2. A specially-crafted HTTP request can lead to arbitrary Javascript code injection. An attacker can send an HTTP request to trigger these vulnerabilities.This XSS is exploited through the name field of the database.
CVSS Score
4.7
EPSS Score
0.001
Published
2023-07-06
An OS command injection vulnerability exists in the vtysh_ubus _get_fw_logs functionality of Milesight UR32L v32.3.0.5. A specially crafted network request can lead to command execution. An attacker can send a network request to trigger this vulnerability.
CVSS Score
8.8
EPSS Score
0.007
Published
2023-07-06
An OS command injection vulnerability exists in the libzebra.so bridge_group functionality of Milesight UR32L v32.3.0.5. A specially crafted network packet can lead to command execution. An attacker can send a sequence of requests to trigger this vulnerability.
CVSS Score
7.2
EPSS Score
0.002
Published
2023-07-06
A sql injection vulnerability exists in the requestHandlers.js LoginAuth functionality of Milesight VPN v2.0.2. A specially-crafted network request can lead to authentication bypass. An attacker can send a malicious packet to trigger this vulnerability.
CVSS Score
7.3
EPSS Score
0.0
Published
2023-07-06
An OS command injection vulnerability exists in the ys_thirdparty check_system_user functionality of Milesight UR32L v32.3.0.5. A specially crafted set of network packets can lead to command execution. An attacker can send a network request to trigger this vulnerability.
CVSS Score
7.2
EPSS Score
0.001
Published
2023-07-06
Milesight NCR/camera version 71.8.0.6-r5 allows authentication bypass through an unspecified method.
CVSS Score
8.2
EPSS Score
0.0
Published
2023-06-12
Milesight NCR/camera version 71.8.0.6-r5 discloses sensitive information through an unspecified request.
CVSS Score
5.3
EPSS Score
0.002
Published
2023-05-08