Skip to content
Milesight vulnerabilities
Products
Show 80 moreShow less
Newest
-
milesight am102/102l v2, am103/103l v2, am304l +61 more +63 more
A cleartext transmission of sensitive information vulnerability in the NFC interface of multiple...
CVE-2026-29988
8.3 High
-
milesight ms-c2964-rflpc, ms-c2966-rflwpc, ms-c2966-x12rlpc +79 more +81 more
Milesight Cameras Heap-based Buffer Overflow
CVE-2026-20766
8.6 High
-
milesight ms-c2964-rflpc, ms-c2966-rflwpc, ms-c2966-x12rlpc +79 more +81 more
Milesight Cameras OS Command Injection
CVE-2026-32649
7.3 High
-
milesight ms-c2964-rflpc, ms-c2966-rflwpc, ms-c2966-x12rlpc +79 more +81 more
Milesight Cameras Use of Hard-coded Cryptographic Key
CVE-2026-32644
9.2 Critical
-
milesight ms-c2964-rflpc, ms-c2966-rflwpc, ms-c2966-x12rlpc +79 more +81 more
Milesight Cameras Use of Hard-coded Credentials
CVE-2026-27785
7.7 High
-
milesight ms-c2964-rflpc, ms-c2966-rflwpc, ms-c2966-x12rlpc +79 more +81 more
Milesight Cameras Authorization Bypass Through User-Controlled Key
CVE-2026-28747
7.3 High
-
milesight ug65-868m-ea, ug65-868m-ea firmware +1 more
Milesight UG65-868M-EA Improper Access Control for Volatile Memory Containing Boot Code
CVE-2025-4043
6.1 Medium
-
milesight devicehub
MileSight DeviceHub - CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-36392
6.1 Medium
-
milesight devicehub
MileSight DeviceHub - CWE-320: Key Management Errors
CVE-2024-36391
9.1 Critical
-
milesight devicehub
MileSight DeviceHub - CWE-20 Improper Input Validation
CVE-2024-36390
7.5 High
-
milesight devicehub
MileSight DeviceHub - CWE-330 Use of Insufficiently Random Values
CVE-2024-36389
9.8 Critical
-
milesight devicehub
MileSight DeviceHub - CWE-305 Missing Authentication for Critical Function
CVE-2024-36388
10.0 Critical
-
milesight devicehub
MileSight DeviceHub - CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-27776
9.8 Critical
-
milesight ur32l, ur32l firmware +1 more
A firmware update vulnerability exists in the luci2-io file-import functionality of Milesight...
CVE-2023-47166
8.8 High
-
milesight ur32 firmware, ur32l firmware, ur35 firmware +5 more +7 more
Milesight UR5X, UR32L, UR32, UR35, UR41 before v35.3.0.7 was discovered to contain a cross-site...
CVE-2023-43260
6.1 Medium
-
milesight ur32 firmware, ur32l firmware, ur35 firmware +2 more +4 more
An information disclosure in Milesight UR5X, UR32L, UR32, UR35, UR41 before v35.3.0.7 allows...
CVE-2023-43261
Public exploit
EPSS 63.0%
7.5 High
-
milesight ur32l, ur32l firmware +1 more
An OS command injection vulnerability exists in the ys_thirdparty user_delete functionality of...
CVE-2023-23550
7.2 High
-
milesight ur32l, ur32l firmware +1 more
A directory traversal vulnerability exists in the luci2-io file-export mib functionality of...
CVE-2023-23547
6.5 Medium
-
milesight ur32l, ur32l firmware +1 more
A buffer overflow vulnerability exists in the uhttpd login functionality of Milesight UR32L v32.3...
CVE-2023-23902
9.8 Critical
-
milesight ur32l, ur32l firmware +1 more
An access violation vulnerability exists in the eventcore functionality of Milesight UR32L v32.3...
CVE-2023-23571
7.5 High
-
milesight ur32l, ur32l firmware +1 more
An OS command injection vulnerability exists in the libzebra.so bridge_group functionality of...
CVE-2023-22306
7.2 High
-
milesight milesightvpn
An authentication bypass vulnerability exists in the requestHandlers.js verifyToken functionality...
CVE-2023-22844
7.3 High
-
milesight ur32l, ur32l firmware +1 more
An os command injection vulnerability exists in the libzebra.so change_hostname functionality of...
CVE-2023-22659
7.2 High
-
milesight milesightvpn
A directory traversal vulnerability exists in the server.js start functionality of Milesight VPN...
CVE-2023-23907
7.5 High
-
milesight milesightvpn
A sql injection vulnerability exists in the requestHandlers.js LoginAuth functionality of...
CVE-2023-22319
7.3 High
-
o milesight, milesight milesightvpn +1 more
Cross-site scripting (xss) vulnerabilities exist in the requestHandlers.js detail_device...
CVE-2023-24497
4.7 Medium
-
milesight milesightvpn
Cross-site scripting (xss) vulnerabilities exist in the requestHandlers.js detail_device...
CVE-2023-24496
4.7 Medium
-
milesight milesightvpn
An os command injection vulnerability exists in the liburvpn.so create_private_key functionality...
CVE-2023-22371
8.1 High
-
milesight ur32l, ur32l firmware +1 more
Two OS command injection vulnerability exist in the vtysh_ubus toolsh_excute.constprop.1...
CVE-2023-24520
8.8 High
-
milesight ur32l, ur32l firmware +1 more
Two OS command injection vulnerability exist in the vtysh_ubus toolsh_excute.constprop.1...
CVE-2023-24519
8.8 High
-
milesight ur32l, ur32l firmware +1 more
A misconfiguration vulnerability exists in the urvpn_client functionality of Milesight UR32L v32...
CVE-2023-23546
4.2 Medium
-
milesight ur32l, ur32l firmware +1 more
Two OS command injection vulnerabilities exist in the urvpn_client cmd_name_action functionality...
CVE-2023-24583
8.8 High
-
milesight ur32l, ur32l firmware +1 more
Two OS command injection vulnerabilities exist in the urvpn_client cmd_name_action functionality...
CVE-2023-24582
8.8 High
-
milesight ur32l, ur32l firmware +1 more
An OS command injection vulnerability exists in the ys_thirdparty check_system_user functionality...
CVE-2023-22365
7.2 High
-
milesight ur32l, ur32l firmware +1 more
An OS command injection vulnerability exists in the vtysh_ubus _get_fw_logs functionality of...
CVE-2023-22299
8.8 High
-
milesight ur32l, ur32l firmware +1 more
An OS command injection vulnerability exists in the ys_thirdparty system_user_script...
CVE-2023-24595
7.2 High
-
milesight ur32l, ur32l firmware +1 more
An OS command injection vulnerability exists in the vtysh_ubus tcpdump_start_cb functionality of...
CVE-2023-22653
8.8 High
-
milesight ur32l, ur32l firmware +1 more
Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3...
CVE-2023-25124
7.2 High
-
milesight ur32l, ur32l firmware +1 more
Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3...
CVE-2023-25123
7.2 High
-
milesight ur32l, ur32l firmware +1 more
A stack-based buffer overflow vulnerability exists in the libzebra.so.0.0.0...
CVE-2023-24018
8.8 High
-
milesight ur32l, ur32l firmware +1 more
Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3...
CVE-2023-25122
7.2 High
-
milesight ur32l, ur32l firmware +1 more
Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3...
CVE-2023-25121
7.2 High
-
milesight ur32l, ur32l firmware +1 more
Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3...
CVE-2023-25120
7.2 High
-
milesight ur32l, ur32l firmware +1 more
Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3...
CVE-2023-25119
7.2 High
-
milesight ur32l, ur32l firmware +1 more
Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3...
CVE-2023-25118
7.2 High
-
milesight ur32l, ur32l firmware +1 more
Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3...
CVE-2023-25117
7.2 High
-
milesight ur32l, ur32l firmware +1 more
Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3...
CVE-2023-25116
7.2 High
-
milesight ur32l, ur32l firmware +1 more
Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3...
CVE-2023-25115
7.2 High
-
milesight ur32l, ur32l firmware +1 more
Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3...
CVE-2023-25114
7.2 High
-
milesight ur32l, ur32l firmware +1 more
Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3...
CVE-2023-25113
7.2 High
- Show olderLoading…