CVE-2023-30466

Authentication Bypass Vulnerability in Milesight Network Video Recorder (NVR)

Published Apr 28, 2023 CVSS 3.1 · 9.8 Critical EPSS 1.1% KEV · Not listed
Description
This vulnerability exists in Milesight 4K/H.265 Series NVR models (MS-Nxxxx-xxG, MS-Nxxxx-xxE, MS-Nxxxx-xxT, MS-Nxxxx-xxH and MS-Nxxxx-xxC), due to a weak password reset mechanism at the Milesight NVR web-based management interface. A remote attacker could exploit this vulnerability by sending a specially crafted http requests on the targeted device.

Successful exploitation of this vulnerability could allow remote attacker to account takeover on the targeted device.










Remediation

Vendor Solution

Update Milesight NVR firmware to latest version   https://www.milesight.com/support/download/firmware https://www.milesight.com/support/download/firmware

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2023-34881 This vulnerability exists in Milesight 4K/H.265 Series NVR models (MS-Nxxxx-xxG, MS-Nxxxx-xxE, MS-Nxxxx-xxT, MS-Nxxxx-xxH and MS-Nxxxx-xxC), due to a weak password reset mechanism at the Milesight NVR web-based management interface. A remote attacker could exploit this vulnerability by sending a specially crafted http requests on the targeted device. Successful exploitation of this vulnerability could allow remote attacker to account takeover on the targeted device.
History
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Weaknesses

Sources

Status
PUBLISHED
Assigner
CERT-In
Published
Updated
Jan 30, 2025, 5:16 PM
Reserved
Apr 10, 2023, 10:20 AM
Status
Modified
Published
Apr 28, 2023, 11:15 AM
Modified
Jun 17, 2026, 5:54 AM