Milesight Cameras Authorization Bypass Through User-Controlled Key
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Milesight | MS-Cxx63-PD | unaffected |
|
||||||
| Milesight | MS-Cxx64-xPD | unaffected |
|
||||||
| Milesight | MS-Cxx73-xPD | unaffected |
|
||||||
| Milesight | MS-Cxx75-xxPD | unaffected |
|
||||||
| Milesight | MS-Cxx83-xPD | unaffected |
|
||||||
| Milesight | MS-Cxx74-PA | unaffected |
|
||||||
| Milesight | MS-C8477-HPG1 | unaffected |
|
||||||
| Milesight | MS-C8477-PC | unaffected |
|
||||||
| Milesight | MS-C5321-FPE | unaffected |
|
||||||
| Milesight | MS-Cxx72-xxxPE | unaffected |
|
||||||
| Milesight | MS-Cxx62-xxxPE | unaffected |
|
||||||
| Milesight | MS-Cxx52-xxxPE | unaffected |
|
||||||
| Milesight | MS-Cxx66-xxxPE | unaffected |
|
||||||
| Milesight | MS-Cxx66-xxxGPE | unaffected |
|
||||||
| Milesight | MS-Cxx61-xxxPE | unaffected |
|
||||||
| Milesight | MS-Cxx67-xxxPE | unaffected |
|
||||||
| Milesight | MS-Cxx71-xxxPE | unaffected |
|
||||||
| Milesight | MS-Cxx41-xxxPE | unaffected |
|
||||||
| Milesight | MS-Cxx76-PE | unaffected |
|
||||||
| Milesight | MS-Cxx65-PE | unaffected |
|
||||||
| Milesight | MS-Cxx66-xxxG1 | unaffected |
|
||||||
| Milesight | MS-Cxx62-xxxG1 | unaffected |
|
||||||
| Milesight | MS-Cxx72-xxxG1 | unaffected |
|
||||||
| Milesight | MS-CQxx31-xxxG1 | unaffected |
|
||||||
| Milesight | MS-CQxx68-xxxG1 | unaffected |
|
||||||
| Milesight | MS-CQxx72-xxxG1 | unaffected |
|
||||||
| Milesight | MS-Nxxxx-NxE | unaffected |
|
||||||
| Milesight | MS-Nxxxx-xxC | unaffected |
|
||||||
| Milesight | MS-Nxxxx-xxE | unaffected |
|
||||||
| Milesight | MS-Nxxxx-xxG | unaffected |
|
||||||
| Milesight | MS-Nxxxx-xxH | unaffected |
|
||||||
| Milesight | MS-Nxxxx-xxT | unaffected |
|
||||||
| Milesight | PMC8266-FPE | unaffected |
|
||||||
| Milesight | PMC8266-FGPE | unaffected |
|
||||||
| Milesight | PM3322-E | unaffected |
|
||||||
| Milesight | TS4466-X4RIPG1 | unaffected |
|
||||||
| Milesight | TS5366-X12RIPG1 | unaffected |
|
||||||
| Milesight | TS8266-X4RIPG1 | unaffected |
|
||||||
| Milesight | TS4466-X4RIVPG1 | unaffected |
|
||||||
| Milesight | TS4466-RFIVPG1 | unaffected |
|
||||||
| Milesight | TS8266-X4RIVPG1 | unaffected |
|
||||||
| Milesight | TS8266-RFIVPG1 | unaffected |
|
||||||
| Milesight | TS4466-X4RIWG1 | unaffected |
|
||||||
| Milesight | TS8266-X4RIWG1 | unaffected |
|
||||||
| Milesight | TS5510-GVH | unaffected |
|
||||||
| Milesight | TS5510-GH | unaffected |
|
||||||
| Milesight | TS5511-GVH | unaffected |
|
||||||
| Milesight | TS2966-X12TPE | unaffected |
|
||||||
| Milesight | TS4466-X4RPE | unaffected |
|
||||||
| Milesight | TS5366-X12PE | unaffected |
|
||||||
| Milesight | TS8266-X4PE | unaffected |
|
||||||
| Milesight | TS2966-X12TVPE | unaffected |
|
||||||
| Milesight | TS4466-X4RVPE | unaffected |
|
||||||
| Milesight | TS5366-X12VPE | unaffected |
|
||||||
| Milesight | TS8266-X4VPE | unaffected |
|
||||||
| Milesight | TS4441-X36RPE | unaffected |
|
||||||
| Milesight | TS4441-X36RE | unaffected |
|
||||||
| Milesight | TS4466-X4RWE | unaffected |
|
||||||
| Milesight | TS8266-X4WE | unaffected |
|
||||||
| Milesight | MS-C2964-RFLPC | unaffected |
|
||||||
| Milesight | MS-C2972-RFLPC | unaffected |
|
||||||
| Milesight | MS-C2966-RFLWPC | unaffected |
|
||||||
| Milesight | TS2866-X4TPC | unaffected |
|
||||||
| Milesight | TS2866-X4TVPC | unaffected |
|
||||||
| Milesight | TS2866-X4TGPC | unaffected |
|
||||||
| Milesight | TS2841-X36TPC | unaffected |
|
||||||
| Milesight | TS2841-X36TPC/W | unaffected |
|
||||||
| Milesight | TS2867-X5TPC | unaffected |
|
||||||
| Milesight | TS2961-X12TPC | unaffected |
|
||||||
| Milesight | TS8266-FPC/P | unaffected |
|
||||||
| Milesight | MS-C2966-X12RLPC | unaffected |
|
||||||
| Milesight | MS-C2966-X12RLVPC | unaffected |
|
||||||
| Milesight | MS-C5366-X12LPC | unaffected |
|
||||||
| Milesight | MS-C5366-X12LVPC | unaffected |
|
||||||
| Milesight | MS-C5361-X12LPC | unaffected |
|
||||||
| Milesight | MS-Cxx66-xxxxGOPC | unaffected |
|
||||||
| Milesight | SC211 | unaffected |
|
||||||
| Milesight | SP111 | unaffected |
|
||||||
| Milesight | MS-Cxx66-RFIPKG1 | unaffected |
|
||||||
| Milesight | MS-Cxx72-RFIPKG1 | unaffected |
|
||||||
| Milesight | MS-Cxx66-FIPKG1 | unaffected |
|
||||||
| Milesight | MS-Cxx72-FIPKG1 | unaffected |
|
No data.
No data.
| Vendor | Product | Versions | ||||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Milesight | Ms-c2964-rflpc |
|
||||||||
| Milesight | Ms-c2966-rflwpc |
|
||||||||
| Milesight | Ms-c2966-x12rlpc |
|
||||||||
| Milesight | Ms-c2966-x12rlvpc |
|
||||||||
| Milesight | Ms-c2972-rflpc |
|
||||||||
| Milesight | Ms-c5321-fpe |
|
||||||||
| Milesight | Ms-c5361-x12lpc |
|
||||||||
| Milesight | Ms-c5366-x12lpc |
|
||||||||
| Milesight | Ms-c5366-x12lvpc |
|
||||||||
| Milesight | Ms-c8477-hpg1 |
|
||||||||
| Milesight | Ms-c8477-pc |
|
||||||||
| Milesight | Ms-cqxx31-xxxg1 |
|
||||||||
| Milesight | Ms-cqxx68-xxxg1 |
|
||||||||
| Milesight | Ms-cqxx72-xxxg1 |
|
||||||||
| Milesight | Ms-cxx41-xxxpe |
|
||||||||
| Milesight | Ms-cxx52-xxxpe |
|
||||||||
| Milesight | Ms-cxx61-xxxpe |
|
||||||||
| Milesight | Ms-cxx62-xxxg1 |
|
||||||||
| Milesight | Ms-cxx62-xxxpe |
|
||||||||
| Milesight | Ms-cxx63-pd |
|
||||||||
| Milesight | Ms-cxx64-xpd |
|
||||||||
| Milesight | Ms-cxx65-pe |
|
||||||||
| Milesight | Ms-cxx66-fipkg1 |
|
||||||||
| Milesight | Ms-cxx66-rfipkg1 |
|
||||||||
| Milesight | Ms-cxx66-xxxg1 |
|
||||||||
| Milesight | Ms-cxx66-xxxgpe |
|
||||||||
| Milesight | Ms-cxx66-xxxpe |
|
||||||||
| Milesight | Ms-cxx66-xxxxgopc |
|
||||||||
| Milesight | Ms-cxx67-xxxpe |
|
||||||||
| Milesight | Ms-cxx71-xxxpe |
|
||||||||
| Milesight | Ms-cxx72-fipkg1 |
|
||||||||
| Milesight | Ms-cxx72-rfipkg1 |
|
||||||||
| Milesight | Ms-cxx72-xxxg1 |
|
||||||||
| Milesight | Ms-cxx72-xxxpe |
|
||||||||
| Milesight | Ms-cxx73-xpd |
|
||||||||
| Milesight | Ms-cxx74-pa |
|
||||||||
| Milesight | Ms-cxx75-xxpd |
|
||||||||
| Milesight | Ms-cxx76-pe |
|
||||||||
| Milesight | Ms-cxx83-xpd |
|
||||||||
| Milesight | Ms-nxxxx-nxe |
|
||||||||
| Milesight | Ms-nxxxx-xxc |
|
||||||||
| Milesight | Ms-nxxxx-xxe |
|
||||||||
| Milesight | Ms-nxxxx-xxg |
|
||||||||
| Milesight | Ms-nxxxx-xxh |
|
||||||||
| Milesight | Ms-nxxxx-xxt |
|
||||||||
| Milesight | Pm3322-e |
|
||||||||
| Milesight | Pmc8266-fgpe |
|
||||||||
| Milesight | Pmc8266-fpe |
|
||||||||
| Milesight | Sc211 |
|
||||||||
| Milesight | Sp111 |
|
||||||||
| Milesight | Ts2841-x36tpc |
|
||||||||
| Milesight | Ts2841-x36tpc/w |
|
||||||||
| Milesight | Ts2866-x4tgpc |
|
||||||||
| Milesight | Ts2866-x4tpc |
|
||||||||
| Milesight | Ts2866-x4tvpc |
|
||||||||
| Milesight | Ts2867-x5tpc |
|
||||||||
| Milesight | Ts2961-x12tpc |
|
||||||||
| Milesight | Ts2966-x12tpe |
|
||||||||
| Milesight | Ts2966-x12tvpe |
|
||||||||
| Milesight | Ts4441-x36re |
|
||||||||
| Milesight | Ts4441-x36rpe |
|
||||||||
| Milesight | Ts4466-rfivpg1 |
|
||||||||
| Milesight | Ts4466-x4ripg1 |
|
||||||||
| Milesight | Ts4466-x4rivpg1 |
|
||||||||
| Milesight | Ts4466-x4riwg1 |
|
||||||||
| Milesight | Ts4466-x4rpe |
|
||||||||
| Milesight | Ts4466-x4rvpe |
|
||||||||
| Milesight | Ts4466-x4rwe |
|
||||||||
| Milesight | Ts5366-x12pe |
|
||||||||
| Milesight | Ts5366-x12ripg1 |
|
||||||||
| Milesight | Ts5366-x12vpe |
|
||||||||
| Milesight | Ts5510-gh |
|
||||||||
| Milesight | Ts5510-gvh |
|
||||||||
| Milesight | Ts5511-gvh |
|
||||||||
| Milesight | Ts8266-fpc/p |
|
||||||||
| Milesight | Ts8266-rfivpg1 |
|
||||||||
| Milesight | Ts8266-x4pe |
|
||||||||
| Milesight | Ts8266-x4ripg1 |
|
||||||||
| Milesight | Ts8266-x4rivpg1 |
|
||||||||
| Milesight | Ts8266-x4riwg1 |
|
||||||||
| Milesight | Ts8266-x4vpe |
|
||||||||
| Milesight | Ts8266-x4we |
|
Vendor Solution
Milesight advises all users to update their device to the latest firmware versions of PE/PC/PA found at https://www.milesight.com/support/download/firmware. https://www.milesight.com/support/download/firmware MS-Cxx63-PD: Update to 51.7.0.77-r13 MS-Cxx64-xPD: Update to 51.7.0.77-r13 MS-Cxx73-xPD: Update to 51.7.0.77-r13 MS-Cxx75-xxPD: Update to 51.7.0.77-r13 MS-Cxx83-xPD: Update to 51.7.0.77-r13 MS-Cxx74-PA: Update to 3x.8.0.3-r13 MS-C8477-HPG1: Update to 63.8.0.4-r4 MS-C8477-PC: Update to 48.8.0.4-r4 MS-C5321-FPE: Update to 62.8.0.4-r6 MS-Cxx72-xxxPE: Update to 61.8.0.5-r2 MS-Cxx62-xxxPE: Update to 61.8.0.5-r2 MS-Cxx52-xxxPE: Update to 61.8.0.5-r2 MS-Cxx66-xxxPE: Update to 61.8.0.5-r2 MS-Cxx66-xxxGPE: Update to 61.8.0.5-r2 MS-Cxx61-xxxPE: Update to 61.8.0.5-r2 MS-Cxx67-xxxPE: Update to 61.8.0.5-r2 MS-Cxx71-xxxPE: Update to 61.8.0.5-r2 MS-Cxx41-xxxPE: Update to 61.8.0.5-r2 MS-Cxx76-PE: Update to 61.8.0.5-r2 MS-Cxx65-PE: Update to 61.8.0.5-r2 MS-Cxx66-xxxG1: Update to 63.8.0.5-r4 MS-Cxx62-xxxG1: Update to 63.8.0.5-r4 MS-Cxx72-xxxG1: Update to 63.8.0.5-r4 MS-CQxx31-xxxG1: Update to CQ_63.8.0.5-r2 MS-CQxx68-xxxG1: Update to CQ_63.8.0.5-r2 MS-CQxx72-xxxG1: Update to CQ_63.8.0.5-r2 MS-Nxxxx-NxE: Update to 7x.9.0.19-r6 MS-Nxxxx-xxC: Update to 7x.9.0.19-r6 MS-Nxxxx-xxE: Update to 7x.9.0.19-r6 MS-Nxxxx-xxG: Update to 7x.9.0.19-r6 MS-Nxxxx-xxH: Update to 7x.9.0.19-r6 MS-Nxxxx-xxT: Update to 7x.9.0.19-r6 PMC8266-FPE: Update to PO_61.8.0.4-r1 PMC8266-FGPE: Update to PO_61.8.0.4-r1 PM3322-E: Update to PI_61.8.0.3-r5 TS4466-X4RIPG1: Update to T_63.8.0.4-r4 TS5366-X12RIPG1: Update to T_63.8.0.4-r4 TS8266-X4RIPG1: Update to T_63.8.0.4-r4 TS4466-X4RIVPG1: Update to T_63.8.0.4-r4 TS4466-RFIVPG1: Update to T_63.8.0.4-r4 TS8266-X4RIVPG1: Update to T_63.8.0.4-r4 TS8266-RFIVPG1: Update to T_63.8.0.4-r4 TS4466-X4RIWG1: Update to T_63.8.0.4-r4 TS8266-X4RIWG1: Update to T_63.8.0.4-r4 TS5510-GVH: Update to T_47.8.0.4-r8 TS5510-GH: Update to T_47.8.0.4-r8 TS5511-GVH: Update to T_47.8.0.4-r8 TS2966-X12TPE: Update to T_61.8.0.4-r4 TS4466-X4RPE: Update to T_61.8.0.4-r4 TS5366-X12PE: Update to T_61.8.0.4-r4 TS8266-X4PE: Update to T_61.8.0.4-r4 TS2966-X12TVPE: Update to T_61.8.0.4-r4 TS4466-X4RVPE: Update to T_61.8.0.4-r4 TS5366-X12VPE: Update to T_61.8.0.4-r4 TS8266-X4VPE: Update to T_61.8.0.4-r4 TS4441-X36RPE: Update to T_61.8.0.4-r4 TS4441-X36RE: Update to T_61.8.0.4-r4 TS4466-X4RWE: Update to T_61.8.0.4-r4 TS8266-X4WE: Update to T_61.8.0.4-r4 MS-C2964-RFLPC: Update to T_45.8.0.3-r10 MS-C2972-RFLPC: Update to T_45.8.0.3-r10 MS-C2966-RFLWPC: Update to T_45.8.0.3-r10 TS2866-X4TPC: Update to T_45.8.0.3-r10 TS2866-X4TVPC: Update to T_45.8.0.3-r10 TS2866-X4TGPC: Update to T_45.8.0.3-r10 TS2841-X36TPC: Update to T_45.8.0.3-r10 TS2841-X36TPC/W: Update to T_45.8.0.3-r10 TS2867-X5TPC: Update to T_45.8.0.3-r10 TS2961-X12TPC: Update to T_45.8.0.3-r10 TS8266-FPC/P: Update to T_45.8.0.3-r10 MS-C2966-X12RLPC: Update to T_45.8.0.3-r10 MS-C2966-X12RLVPC: Update to T_45.8.0.3-r10 MS-C5366-X12LPC: Update to T_45.8.0.3-r10 MS-C5366-X12LVPC: Update to T_45.8.0.3-r10 MS-C5361-X12LPC: Update to T_45.8.0.3-r10 MS-Cxx66-xxxxGOPC: Update to 45.8.0.2-AIoT-r5 SC211: Update to C_21.1.0.8-r5 SP111: Update to 52.8.0.4-r6 MS-Cxx66-RFIPKG1: Update to 63.8.0.5-r2-NX MS-Cxx72-RFIPKG1: Update to 63.8.0.5-r2-NX MS-Cxx66-FIPKG1: Update to 63.8.0.5-r2-NX MS-Cxx72-FIPKG1: Update to 63.8.0.5-r2-NX
No CVSS v3.0
No CVSS v2
This CVE is not in the KEV list.
Exploit prediction score: < 1% (0.177% probability within 30 days)
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Milesight
Milesight ms-c2964-rflpc Milesight ms-c2966-rflwpc Milesight ms-c2966-x12rlpc Milesight ms-c2966-x12rlvpc Milesight ms-c2972-rflpc Milesight ms-c5321-fpe Milesight ms-c5361-x12lpc Milesight ms-c5366-x12lpc Milesight ms-c5366-x12lvpc Milesight ms-c8477-hpg1 Milesight ms-c8477-pc Milesight ms-cqxx31-xxxg1 Milesight ms-cqxx68-xxxg1 Milesight ms-cqxx72-xxxg1 Milesight ms-cxx41-xxxpe Milesight ms-cxx52-xxxpe Milesight ms-cxx61-xxxpe Milesight ms-cxx62-xxxg1 Milesight ms-cxx62-xxxpe Milesight ms-cxx63-pd Milesight ms-cxx64-xpd Milesight ms-cxx65-pe Milesight ms-cxx66-fipkg1 Milesight ms-cxx66-rfipkg1 Milesight ms-cxx66-xxxg1 Milesight ms-cxx66-xxxgpe Milesight ms-cxx66-xxxpe Milesight ms-cxx66-xxxxgopc Milesight ms-cxx67-xxxpe Milesight ms-cxx71-xxxpe Milesight ms-cxx72-fipkg1 Milesight ms-cxx72-rfipkg1 Milesight ms-cxx72-xxxg1 Milesight ms-cxx72-xxxpe Milesight ms-cxx73-xpd Milesight ms-cxx74-pa Milesight ms-cxx75-xxpd Milesight ms-cxx76-pe Milesight ms-cxx83-xpd Milesight ms-nxxxx-nxe Milesight ms-nxxxx-xxc Milesight ms-nxxxx-xxe Milesight ms-nxxxx-xxg Milesight ms-nxxxx-xxh Milesight ms-nxxxx-xxt Milesight pm3322-e Milesight pmc8266-fgpe Milesight pmc8266-fpe Milesight sc211 Milesight sp111 Milesight ts2841-x36tpc Milesight ts2841-x36tpc/w Milesight ts2866-x4tgpc Milesight ts2866-x4tpc Milesight ts2866-x4tvpc Milesight ts2867-x5tpc Milesight ts2961-x12tpc Milesight ts2966-x12tpe Milesight ts2966-x12tvpe Milesight ts4441-x36re Milesight ts4441-x36rpe Milesight ts4466-rfivpg1 Milesight ts4466-x4ripg1 Milesight ts4466-x4rivpg1 Milesight ts4466-x4riwg1 Milesight ts4466-x4rpe Milesight ts4466-x4rvpe Milesight ts4466-x4rwe Milesight ts5366-x12pe Milesight ts5366-x12ripg1 Milesight ts5366-x12vpe Milesight ts5510-gh Milesight ts5510-gvh Milesight ts5511-gvh Milesight ts8266-fpc/p Milesight ts8266-rfivpg1 Milesight ts8266-x4pe Milesight ts8266-x4ripg1 Milesight ts8266-x4rivpg1 Milesight ts8266-x4riwg1 Milesight ts8266-x4vpe Milesight ts8266-x4we |
|
| Vendors & Products |
Milesight
Milesight ms-c2964-rflpc Milesight ms-c2966-rflwpc Milesight ms-c2966-x12rlpc Milesight ms-c2966-x12rlvpc Milesight ms-c2972-rflpc Milesight ms-c5321-fpe Milesight ms-c5361-x12lpc Milesight ms-c5366-x12lpc Milesight ms-c5366-x12lvpc Milesight ms-c8477-hpg1 Milesight ms-c8477-pc Milesight ms-cqxx31-xxxg1 Milesight ms-cqxx68-xxxg1 Milesight ms-cqxx72-xxxg1 Milesight ms-cxx41-xxxpe Milesight ms-cxx52-xxxpe Milesight ms-cxx61-xxxpe Milesight ms-cxx62-xxxg1 Milesight ms-cxx62-xxxpe Milesight ms-cxx63-pd Milesight ms-cxx64-xpd Milesight ms-cxx65-pe Milesight ms-cxx66-fipkg1 Milesight ms-cxx66-rfipkg1 Milesight ms-cxx66-xxxg1 Milesight ms-cxx66-xxxgpe Milesight ms-cxx66-xxxpe Milesight ms-cxx66-xxxxgopc Milesight ms-cxx67-xxxpe Milesight ms-cxx71-xxxpe Milesight ms-cxx72-fipkg1 Milesight ms-cxx72-rfipkg1 Milesight ms-cxx72-xxxg1 Milesight ms-cxx72-xxxpe Milesight ms-cxx73-xpd Milesight ms-cxx74-pa Milesight ms-cxx75-xxpd Milesight ms-cxx76-pe Milesight ms-cxx83-xpd Milesight ms-nxxxx-nxe Milesight ms-nxxxx-xxc Milesight ms-nxxxx-xxe Milesight ms-nxxxx-xxg Milesight ms-nxxxx-xxh Milesight ms-nxxxx-xxt Milesight pm3322-e Milesight pmc8266-fgpe Milesight pmc8266-fpe Milesight sc211 Milesight sp111 Milesight ts2841-x36tpc Milesight ts2841-x36tpc/w Milesight ts2866-x4tgpc Milesight ts2866-x4tpc Milesight ts2866-x4tvpc Milesight ts2867-x5tpc Milesight ts2961-x12tpc Milesight ts2966-x12tpe Milesight ts2966-x12tvpe Milesight ts4441-x36re Milesight ts4441-x36rpe Milesight ts4466-rfivpg1 Milesight ts4466-x4ripg1 Milesight ts4466-x4rivpg1 Milesight ts4466-x4riwg1 Milesight ts4466-x4rpe Milesight ts4466-x4rvpe Milesight ts4466-x4rwe Milesight ts5366-x12pe Milesight ts5366-x12ripg1 Milesight ts5366-x12vpe Milesight ts5510-gh Milesight ts5510-gvh Milesight ts5511-gvh Milesight ts8266-fpc/p Milesight ts8266-rfivpg1 Milesight ts8266-x4pe Milesight ts8266-x4ripg1 Milesight ts8266-x4rivpg1 Milesight ts8266-x4riwg1 Milesight ts8266-x4vpe Milesight ts8266-x4we |
| Type | Values Removed | Values Added |
|---|---|---|
| Description | A weak key generation vulnerability exists in specific firmware versions of Milesight AIOT cameras allows authorization to be bypassed. | |
| Title | Milesight Cameras Authorization Bypass Through User-Controlled Key | |
| Weaknesses | CWE-639 | |
| References |
| |
| Metrics |
cvssV3_1
|