Vulnerabilities in Milesight
94 resultsCVE-2023-24506HIGHMilesight NCR/Camera CWE-522: Insufficiently Protected CredentialsEPSS 0.6%CVE-2023-23546MEDIUMA misconfiguration vulnerability exists in the urvpn_client functionality of Milesight UR32L v32.3.0.5. A specially-crafted man-in-the-middlEPSS 0.6%CVE-2024-36389CRITICALMileSight DeviceHub - CWE-330 Use of Insufficiently Random ValuesEPSS 0.5%CVE-2023-24505MEDIUMMilesight NCR/Camera CWE-200: Exposure of Sensitive InformationEPSS 0.5%CVE-2024-36388CRITICALMileSight DeviceHub - CWE-305 Missing Authentication for Critical FunctionEPSS 0.5%CVE-2024-36390HIGHMileSight DeviceHub - CWE-20 Improper Input ValidationEPSS 0.4%CVE-2024-36391CRITICALMileSight DeviceHub - CWE-320: Key Management ErrorsEPSS 0.4%CVE-2025-4043MEDIUMMilesight UG65-868M-EA Improper Access Control for Volatile Memory Containing Boot CodeEPSS 0.3%CVE-2026-20766HIGHMilesight Cameras Heap-based Buffer OverflowEPSS 0.3%CVE-2024-36392MEDIUMMileSight DeviceHub - CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')EPSS 0.3%CVE-2026-27785HIGHMilesight Cameras Use of Hard-coded CredentialsEPSS 0.2%CVE-2026-32644CRITICALMilesight Cameras Use of Hard-coded Cryptographic KeyEPSS 0.2%CVE-2026-28747HIGHMilesight Cameras Authorization Bypass Through User-Controlled KeyEPSS 0.2%CVE-2026-29988HIGHA cleartext transmission of sensitive information vulnerability in the NFC interface of multiple Milesight IoT device models running affecteEPSS 0.2%