7.3
CVSS 4.0
Няма данни
Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)
Няма потвърждение
Атакува се
Няма данни
Време до експлоатация
Атакува се от съседна мрежа, при специфични условия, без вход и след действие от потребителя.
- Експлоатация: няма данни за експлоатация
- Атаката не може да се автоматизира
Описание
Оригинално описание
A weak key generation vulnerability exists in specific firmware versions of Milesight AIOT cameras allows authorization to be bypassed.
Засегнати продукти
- Milesight MS-Cxx63-PD: до 51.7.0.77-r12
- Milesight MS-Cxx64-xPD: до 51.7.0.77-r12
- Milesight MS-Cxx73-xPD: до 51.7.0.77-r12
- Milesight MS-Cxx75-xxPD: до 51.7.0.77-r12
- Milesight MS-Cxx83-xPD: до 51.7.0.77-r12
- Milesight MS-Cxx74-PA: до 3x.8.0.3-r11
- Milesight MS-C8477-HPG1: до 63.8.0.4-r3
- Milesight MS-C8477-PC: до 48.8.0.4-r3
- Milesight MS-C5321-FPE: до 62.8.0.4-r5
- Milesight MS-Cxx72-xxxPE: до 61.8.0.5-r2
- Milesight MS-Cxx62-xxxPE: до 61.8.0.5-r2
- Milesight MS-Cxx52-xxxPE: до 61.8.0.5-r2
- Milesight MS-Cxx66-xxxPE: до 61.8.0.5-r2
- Milesight MS-Cxx66-xxxGPE: до 61.8.0.5-r2
- Milesight MS-Cxx61-xxxPE: до 61.8.0.5-r2
- Milesight MS-Cxx67-xxxPE: до 61.8.0.5-r2
- Milesight MS-Cxx71-xxxPE: до 61.8.0.5-r2
- Milesight MS-Cxx41-xxxPE: до 61.8.0.5-r2
- Milesight MS-Cxx76-PE: до 61.8.0.5-r2
- Milesight MS-Cxx65-PE: до 61.8.0.5-r2
- Milesight MS-Cxx66-xxxG1: до 63.8.0.5-r3
- Milesight MS-Cxx62-xxxG1: до 63.8.0.5-r3
- Milesight MS-Cxx72-xxxG1: до 63.8.0.5-r3
- Milesight MS-CQxx31-xxxG1: до CQ_63.8.0.5-r1
- Milesight MS-CQxx68-xxxG1: до CQ_63.8.0.5-r1
- Milesight MS-CQxx72-xxxG1: до CQ_63.8.0.5-r1
- Milesight MS-Nxxxx-NxE: до 7x.9.0.19-r5
- Milesight MS-Nxxxx-xxC: до 7x.9.0.19-r5
- Milesight MS-Nxxxx-xxE: до 7x.9.0.19-r5
- Milesight MS-Nxxxx-xxG: до 7x.9.0.19-r5
- Milesight MS-Nxxxx-xxH: до 7x.9.0.19-r5
- Milesight MS-Nxxxx-xxT: до 7x.9.0.19-r5
- Milesight PMC8266-FPE: до PO_61.8.0.4_LPR
- Milesight PMC8266-FGPE: до PO_61.8.0.4_LPR
- Milesight PM3322-E: до PI_61.8.0.3_LPR-r3
- Milesight TS4466-X4RIPG1: до T_63.8.0.4_LPR-r3
- Milesight TS5366-X12RIPG1: до T_63.8.0.4_LPR-r3
- Milesight TS8266-X4RIPG1: до T_63.8.0.4_LPR-r3
- Milesight TS4466-X4RIVPG1: до T_63.8.0.4_LPR-r3
- Milesight TS4466-RFIVPG1: до T_63.8.0.4_LPR-r3
- Milesight TS8266-X4RIVPG1: до T_63.8.0.4_LPR-r3
- Milesight TS8266-RFIVPG1: до T_63.8.0.4_LPR-r3
- Milesight TS4466-X4RIWG1: до T_63.8.0.4_LPR-r3
- Milesight TS8266-X4RIWG1: до T_63.8.0.4_LPR-r3
- Milesight TS5510-GVH: до T_47.8.0.4_LPR-r7
- Milesight TS5510-GH: до T_47.8.0.4_LPR-r6
- Milesight TS5511-GVH: до T_47.8.0.4_LPR-r6
- Milesight TS2966-X12TPE: до T_61.8.0.4_LPR-r3
- Milesight TS4466-X4RPE: до T_61.8.0.4_LPR-r3
- Milesight TS5366-X12PE: до T_61.8.0.4_LPR-r3
- Milesight TS8266-X4PE: до T_61.8.0.4_LPR-r3
- Milesight TS2966-X12TVPE: до T_61.8.0.4_LPR-r3
- Milesight TS4466-X4RVPE: до T_61.8.0.4_LPR-r3
- Milesight TS5366-X12VPE: до T_61.8.0.4_LPR-r3
- Milesight TS8266-X4VPE: до T_61.8.0.4_LPR-r3
- Milesight TS4441-X36RPE: до T_61.8.0.4_LPR-r3
- Milesight TS4441-X36RE: до T_61.8.0.4_LPR-r3
- Milesight TS4466-X4RWE: до T_61.8.0.4_LPR-r3
- Milesight TS8266-X4WE: до T_61.8.0.4_LPR-r3
- Milesight MS-C2964-RFLPC: до T_45.8.0.3-r9
- Milesight MS-C2972-RFLPC: до T_45.8.0.3-r9
- Milesight MS-C2966-RFLWPC: до T_45.8.0.3-r9
- Milesight TS2866-X4TPC: до T_45.8.0.3-r9
- Milesight TS2866-X4TVPC: до T_45.8.0.3-r9
- Milesight TS2866-X4TGPC: до T_45.8.0.3-r9
- Milesight TS2841-X36TPC: до T_45.8.0.3-r9
- Milesight TS2841-X36TPC/W: до T_45.8.0.3-r9
- Milesight TS2867-X5TPC: до T_45.8.0.3-r9
- Milesight TS2961-X12TPC: до T_45.8.0.3-r9
- Milesight TS8266-FPC/P: до T_45.8.0.3-r9
- Milesight MS-C2966-X12RLPC: до T_45.8.0.3-r9
- Milesight MS-C2966-X12RLVPC: до T_45.8.0.3-r9
- Milesight MS-C5366-X12LPC: до T_45.8.0.3-r9
- Milesight MS-C5366-X12LVPC: до T_45.8.0.3-r9
- Milesight MS-C5361-X12LPC: до T_45.8.0.3-r9
- Milesight MS-Cxx66-xxxxGOPC: до 45.8.0.2-AIoT-r4
- Milesight SC211: до C_21.1.0.8-r4
- Milesight SP111: до 52.8.0.4-r5
- Milesight MS-Cxx66-RFIPKG1: до 63.8.0.4-r1-NX
- Milesight MS-Cxx72-RFIPKG1: до 63.8.0.4-r1-NX
- Milesight MS-Cxx66-FIPKG1: до 63.8.0.4-r1-NX
- Milesight MS-Cxx72-FIPKG1: до 63.8.0.4-r1-NX
Вид слабост
История
- 27 април 2026 Публикувано