CVE-2023-30466

CRITICAL

Milesight Ms-n5008-uc Firmware - Password Reset Weakness

Title source: rule
STIX 2.1

Description

This vulnerability exists in Milesight 4K/H.265 Series NVR models (MS-Nxxxx-xxG, MS-Nxxxx-xxE, MS-Nxxxx-xxT, MS-Nxxxx-xxH and MS-Nxxxx-xxC), due to a weak password reset mechanism at the Milesight NVR web-based management interface. A remote attacker could exploit this vulnerability by sending a specially crafted http requests on the targeted device. Successful exploitation of this vulnerability could allow remote attacker to account takeover on the targeted device.

Scores

CVSS v3 9.8
EPSS 0.0092
EPSS Percentile 76.0%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact total

Details

CWE
CWE-640
Status published
Products (21)
milesight/ms-n1004-uc_firmware < 73.9.0.18-r2
milesight/ms-n1004-upc_firmware < 73.9.0.18-r2
milesight/ms-n1008-uc_firmware < 73.9.0.18-r2
milesight/ms-n1008-unc_firmware < 73.9.0.18-r2
milesight/ms-n1008-unpc_firmware < 73.9.0.18-r2
milesight/ms-n1008-upc_firmware < 73.9.0.18-r2
milesight/ms-n5008-e_firmware < 75.9.0.18-r2
milesight/ms-n5008-pe_firmware < 75.9.0.18-r2
milesight/ms-n5008-uc_firmware < 73.9.0.18-r2
milesight/ms-n5008-upc_firmware < 73.9.0.18-r2
... and 11 more
Published Apr 28, 2023
Tracked Since Feb 18, 2026