Strix
26.1K

CVE-2023-30466

CRITICALCVSS 9.8/10EPSS 1.13%

Last modified

CVE-2023-30466 is a critical-severity vulnerability rated 9.8/10 on the CVSS scale. This vulnerability exists in Milesight 4K/H.265 Series NVR models (MS-Nxxxx-xxG, MS-Nxxxx-xxE, MS-Nxxxx-xxT, MS-Nxxxx-xxH and MS-Nxxxx-xxC), due to a weak password reset mechanism at the Milesight NVR web-based management interface. A remote attacker could exploit this vulnerability by sending a specially crafted http requests on the targeted device. Successful exploitation of this vulnerability could allow remote attacker to account takeover on the targeted device. . EPSS estimates a 1.13% chance of exploitation in the next 30 days.

Description

This vulnerability exists in Milesight 4K/H.265 Series NVR models (MS-Nxxxx-xxG, MS-Nxxxx-xxE, MS-Nxxxx-xxT, MS-Nxxxx-xxH and MS-Nxxxx-xxC), due to a weak password reset mechanism at the Milesight NVR web-based management interface. A remote attacker could exploit this vulnerability by sending a specially crafted http requests on the targeted device. Successful exploitation of this vulnerability could allow remote attacker to account takeover on the targeted device.

Metrics

CVSS 3.1
9.8/10

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Probability
1.13%

62.3th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersions
MilesightMs-N5008-Uc Firmware< 73.9.0.18-r2
MilesightMs-N1008-Unc Firmware< 73.9.0.18-r2
MilesightMs-N1008-Uc Firmware< 73.9.0.18-r2
MilesightMs-N1004-Uc Firmware< 73.9.0.18-r2
MilesightMs-N5016-E Firmware< 75.9.0.18-r2
MilesightMs-N5008-E Firmware< 75.9.0.18-r2
MilesightMs-N7016-Uh Firmware< 71.9.0.18-r2
MilesightMs-N7032-Uh Firmware< 71.9.0.18-r2
MilesightMs-N8064-Uh Firmware< 71.9.0.18-r2
MilesightMs-N8032-Uh Firmware< 71.9.0.18-r2
MilesightMs-N1004-Upc Firmware< 73.9.0.18-r2
MilesightMs-N1008-Upc Firmware< 73.9.0.18-r2
MilesightMs-N1008-Unpc Firmware< 73.9.0.18-r2
MilesightMs-N5008-Upc Firmware< 73.9.0.18-r2
MilesightMs-N5016-Pe Firmware< 75.9.0.18-r2
MilesightMs-N5008-Pe Firmware< 75.9.0.18-r2
MilesightMs-N7016-Uph Firmware< 71.9.0.18-r2
MilesightMs-N7032-Uph Firmware< 71.9.0.18-r2
MilesightMs-N7048-Uph Firmware< 71.9.0.18-r2
MilesightMs-Nxxxx-Xxg Firmware< 77.9.0.18-r2
MilesightMs-Nxxxx-Xxt Firmware< 72.9.0.18-r2

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2023-30466?
This vulnerability exists in Milesight 4K/H.265 Series NVR models (MS-Nxxxx-xxG, MS-Nxxxx-xxE, MS-Nxxxx-xxT, MS-Nxxxx-xxH and MS-Nxxxx-xxC), due to a weak password reset mechanism at the Milesight NVR web-based management interface. A remote attacker could exploit this vulnerability by sending a specially crafted http requests on the targeted device. Successful exploitation of this vulnerability could allow remote attacker to account takeover on the targeted device.
How severe is CVE-2023-30466?
CVE-2023-30466 has a CVSS score of 9.8/10 (CRITICAL severity). The EPSS model estimates a 1.13% probability of exploitation in the next 30 days.
How do I fix CVE-2023-30466?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2023-30466?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST