by Kastro CVE-2026-32644
Milesight MS-Cxx63-PD — Milesight Cameras Use of Hard-coded Cryptographic Key
Description · from the CVE record
Specific firmware versions of Milesight AIOT cameras use SSL certificates with default private keys.
Affected
ProductAffectedFixed inSource
MS-Cxx63-PD≤ 51.7.0.77-r12–CNA
MS-Cxx64-xPD≤ 51.7.0.77-r12–CNA
MS-Cxx73-xPD≤ 51.7.0.77-r12–CNA
MS-Cxx75-xxPD≤ 51.7.0.77-r12–CNA
MS-Cxx83-xPD≤ 51.7.0.77-r12–CNA
MS-Cxx74-PA≤ 3x.8.0.3-r11–CNA
MS-C8477-HPG1≤ 63.8.0.4-r3–CNA
MS-C8477-PC≤ 48.8.0.4-r3–CNA
MS-C5321-FPE≤ 62.8.0.4-r5–CNA
MS-Cxx72-xxxPE≤ 61.8.0.5-r2–CNA
MS-Cxx62-xxxPE≤ 61.8.0.5-r2–CNA
MS-Cxx52-xxxPE≤ 61.8.0.5-r2–CNA
Scores by source
icscert (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
icscert (CNA)9.2CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total