by Kastro CVE-2023-30466
Milesight NVR MS-Nxxxx-xxG — Authentication Bypass Vulnerability in Milesight Network Video Recorder (NVR)
Description · from the CVE record
This vulnerability exists in Milesight 4K/H.265 Series NVR models (MS-Nxxxx-xxG, MS-Nxxxx-xxE, MS-Nxxxx-xxT, MS-Nxxxx-xxH and MS-Nxxxx-xxC), due to a weak password reset mechanism at the Milesight NVR web-based management interface. A remote attacker could exploit this vulnerability by sending a specially crafted http requests on the targeted device. Successful exploitation of this vulnerability could allow remote attacker to account takeover on the targeted device.
Affected
ProductAffectedFixed inSource
NVR MS-Nxxxx-xxG77.X – < 77.9.0.18-r277.9.0.18-r2CNA
NVR MS-Nxxxx-xxE75.X – < 75.9.0.18-r275.9.0.18-r2CNA
NVR MS-Nxxxx-xxT72.X – < 72.9.0.18-r272.9.0.18-r2CNA
NVR MS-Nxxxx-xxH71.X – < 71.9.0.18-r271.9.0.18-r2CNA
NVR MS-Nxxxx-xxC73.X – < 73.9.0.18-r273.9.0.18-r2CNA
Scores by source
CERT-In (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total