Milesight Cameras Authorization Bypass Through User-Controlled Key
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
- Exploitation: none
- Automatable: no
- Technical impact: total
Summary
A weak key generation vulnerability exists in specific firmware versions of Milesight AIOT cameras allows authorization to be bypassed.
Timeline
- CVE published
- CISA SSVC assessment
Exploitation: none · Automatable: no · Technical impact: total
- Record last updated
Affected versions
- Milesight MS-Cxx63-PD
through 51.7.0.77-r12
- Milesight MS-Cxx64-xPD
through 51.7.0.77-r12
- Milesight MS-Cxx73-xPD
through 51.7.0.77-r12
- Milesight MS-Cxx75-xxPD
through 51.7.0.77-r12
- Milesight MS-Cxx83-xPD
through 51.7.0.77-r12
- Milesight MS-Cxx74-PA
through 3x.8.0.3-r11
- Milesight MS-C8477-HPG1
through 63.8.0.4-r3
- Milesight MS-C8477-PC
through 48.8.0.4-r3
- Milesight MS-C5321-FPE
through 62.8.0.4-r5
- Milesight MS-Cxx72-xxxPE
through 61.8.0.5-r2
- Milesight MS-Cxx62-xxxPE
through 61.8.0.5-r2
- Milesight MS-Cxx52-xxxPE
through 61.8.0.5-r2
- Milesight MS-Cxx66-xxxPE
through 61.8.0.5-r2
- Milesight MS-Cxx66-xxxGPE
through 61.8.0.5-r2
- Milesight MS-Cxx61-xxxPE
through 61.8.0.5-r2
- Milesight MS-Cxx67-xxxPE
through 61.8.0.5-r2
- Milesight MS-Cxx71-xxxPE
through 61.8.0.5-r2
- Milesight MS-Cxx41-xxxPE
through 61.8.0.5-r2
- Milesight MS-Cxx76-PE
through 61.8.0.5-r2
- Milesight MS-Cxx65-PE
through 61.8.0.5-r2
- Milesight MS-Cxx66-xxxG1
through 63.8.0.5-r3
- Milesight MS-Cxx62-xxxG1
through 63.8.0.5-r3
- Milesight MS-Cxx72-xxxG1
through 63.8.0.5-r3
- Milesight MS-CQxx31-xxxG1
through CQ_63.8.0.5-r1
- Milesight MS-CQxx68-xxxG1
through CQ_63.8.0.5-r1
- Milesight MS-CQxx72-xxxG1
through CQ_63.8.0.5-r1
- Milesight MS-Nxxxx-NxE
through 7x.9.0.19-r5
- Milesight MS-Nxxxx-xxC
through 7x.9.0.19-r5
- Milesight MS-Nxxxx-xxE
through 7x.9.0.19-r5
- Milesight MS-Nxxxx-xxG
through 7x.9.0.19-r5
- Milesight MS-Nxxxx-xxH
through 7x.9.0.19-r5
- Milesight MS-Nxxxx-xxT
through 7x.9.0.19-r5
- Milesight PMC8266-FPE
through PO_61.8.0.4_LPR
- Milesight PMC8266-FGPE
through PO_61.8.0.4_LPR
- Milesight PM3322-E
through PI_61.8.0.3_LPR-r3
- Milesight TS4466-X4RIPG1
through T_63.8.0.4_LPR-r3
- Milesight TS5366-X12RIPG1
through T_63.8.0.4_LPR-r3
- Milesight TS8266-X4RIPG1
through T_63.8.0.4_LPR-r3
- Milesight TS4466-X4RIVPG1
through T_63.8.0.4_LPR-r3
- Milesight TS4466-RFIVPG1
through T_63.8.0.4_LPR-r3
- Milesight TS8266-X4RIVPG1
through T_63.8.0.4_LPR-r3
- Milesight TS8266-RFIVPG1
through T_63.8.0.4_LPR-r3
- Milesight TS4466-X4RIWG1
through T_63.8.0.4_LPR-r3
- Milesight TS8266-X4RIWG1
through T_63.8.0.4_LPR-r3
- Milesight TS5510-GVH
through T_47.8.0.4_LPR-r7
- Milesight TS5510-GH
through T_47.8.0.4_LPR-r6
- Milesight TS5511-GVH
through T_47.8.0.4_LPR-r6
- Milesight TS2966-X12TPE
through T_61.8.0.4_LPR-r3
- Milesight TS4466-X4RPE
through T_61.8.0.4_LPR-r3
- Milesight TS5366-X12PE
through T_61.8.0.4_LPR-r3
- Milesight TS8266-X4PE
through T_61.8.0.4_LPR-r3
- Milesight TS2966-X12TVPE
through T_61.8.0.4_LPR-r3
- Milesight TS4466-X4RVPE
through T_61.8.0.4_LPR-r3
- Milesight TS5366-X12VPE
through T_61.8.0.4_LPR-r3
- Milesight TS8266-X4VPE
through T_61.8.0.4_LPR-r3
- Milesight TS4441-X36RPE
through T_61.8.0.4_LPR-r3
- Milesight TS4441-X36RE
through T_61.8.0.4_LPR-r3
- Milesight TS4466-X4RWE
through T_61.8.0.4_LPR-r3
- Milesight TS8266-X4WE
through T_61.8.0.4_LPR-r3
- Milesight MS-C2964-RFLPC
through T_45.8.0.3-r9
- Milesight MS-C2972-RFLPC
through T_45.8.0.3-r9
- Milesight MS-C2966-RFLWPC
through T_45.8.0.3-r9
- Milesight TS2866-X4TPC
through T_45.8.0.3-r9
- Milesight TS2866-X4TVPC
through T_45.8.0.3-r9
- Milesight TS2866-X4TGPC
through T_45.8.0.3-r9
- Milesight TS2841-X36TPC
through T_45.8.0.3-r9
- Milesight TS2841-X36TPC/W
through T_45.8.0.3-r9
- Milesight TS2867-X5TPC
through T_45.8.0.3-r9
- Milesight TS2961-X12TPC
through T_45.8.0.3-r9
- Milesight TS8266-FPC/P
through T_45.8.0.3-r9
- Milesight MS-C2966-X12RLPC
through T_45.8.0.3-r9
- Milesight MS-C2966-X12RLVPC
through T_45.8.0.3-r9
- Milesight MS-C5366-X12LPC
through T_45.8.0.3-r9
- Milesight MS-C5366-X12LVPC
through T_45.8.0.3-r9
- Milesight MS-C5361-X12LPC
through T_45.8.0.3-r9
- Milesight MS-Cxx66-xxxxGOPC
through 45.8.0.2-AIoT-r4
- Milesight SC211
through C_21.1.0.8-r4
- Milesight SP111
through 52.8.0.4-r5
- Milesight MS-Cxx66-RFIPKG1
through 63.8.0.4-r1-NX
- Milesight MS-Cxx72-RFIPKG1
through 63.8.0.4-r1-NX
- Milesight MS-Cxx66-FIPKG1
through 63.8.0.4-r1-NX
- Milesight MS-Cxx72-FIPKG1
through 63.8.0.4-r1-NX