Milesight Vulnerabilidad

Cronología

Escribe

Producto

Milesight UR32L65
Milesight VPN6
Milesight IP Security Camera5
Milesight NCR Camera3
Milesight UR5X2

Contramedidas

Official Fix3
Temporary Fix0
Workaround0
Unavailable0
Not Defined79

Explotabilidad

High0
Functional0
Proof-of-Concept61
Unproven0
Not Defined21

Vector de acceso

Not Defined0
Physical0
Local0
Adjacent6
Network76

Autenticación

Not Defined0
High49
Low12
None21

La interacción del usuario

Not Defined0
Required7
None75

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤41
≤50
≤65
≤77
≤851
≤914
≤104

CVSSv3 Temp

≤10
≤20
≤30
≤41
≤50
≤65
≤713
≤846
≤915
≤102

VulDB

≤10
≤20
≤30
≤43
≤54
≤65
≤71
≤859
≤98
≤102

NVD

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤846
≤91
≤1010

CNA

≤10
≤20
≤30
≤40
≤51
≤61
≤71
≤859
≤911
≤102

Proveedor

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Explotar día 0

<1k2
<2k70
<5k10
<10k0
<25k0
<50k0
<100k0
≥100k0

Explotar hoy

<1k75
<2k7
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Explotar el volumen del mercado

🔴 CTI Ocupaciones

Affected Products (10): 4K H.265 (2), IP Security Camera (5), NCR Camera (3), UR5X (2), UR32 (2), UR32L (65), UR35 (2), UR41 (2), VPN (6), Video Management Systems (1)

Fecha de publicaciónBaseTempVulnerabilidadProdExpConEPSSCTICVE
2023-10-063.53.4Milesight UR5X/UR32L/UR32/UR35/UR41 Admin Panel cross site scriptingDesconocidoNot DefinedOfficial Fix0.000460.00CVE-2023-43260
2023-10-045.55.4Milesight UR5X/UR32L/UR32/UR35/UR41 divulgación de informaciónDesconocidoNot DefinedOfficial Fix0.004200.02CVE-2023-43261
2023-07-066.36.2Milesight VPN HTTP Request requestHandlers.js detail_device cross site scriptingNetwork Encryption SoftwareNot DefinedNot Defined0.000440.00CVE-2023-24497
2023-07-066.36.2Milesight VPN requestHandlers.js detail_device cross site scriptingNetwork Encryption SoftwareNot DefinedNot Defined0.000440.00CVE-2023-24496
2023-07-067.37.1Milesight UR32L HTTP Request vtysh_ubus set_ike_profile desbordamiento de búferDesconocidoProof-of-ConceptNot Defined0.000530.00CVE-2023-25121
2023-07-067.37.1Milesight UR32L HTTP Request vtysh_ubus set_openvpn_client desbordamiento de búferDesconocidoProof-of-ConceptNot Defined0.000530.00CVE-2023-25117
2023-07-067.37.1Milesight UR32L HTTP Request vtysh_ubus set_gre desbordamiento de búferDesconocidoProof-of-ConceptNot Defined0.000530.04CVE-2023-25109
2023-07-067.37.1Milesight UR32L HTTP Request vtysh_ubus set_gre desbordamiento de búferDesconocidoProof-of-ConceptNot Defined0.000530.00CVE-2023-25106
2023-07-067.37.1Milesight UR32L HTTP Request vtysh_ubus set_openvpn_client desbordamiento de búferDesconocidoProof-of-ConceptNot Defined0.000530.00CVE-2023-25116
2023-07-067.37.1Milesight UR32L HTTP Request vtysh_ubus set_gre desbordamiento de búferDesconocidoProof-of-ConceptNot Defined0.000530.00CVE-2023-25111

72 no se muestran más entradas

Want to stay up to date on a daily basis?

Enable the mail alert feature now!