جزئیات آسیب‌پذیری

CVE-2026-32644

Milesight MS-C2964-RFLPCMilesight MS-C2966-RFLWPCMilesight MS-C2966-X12RLPCMilesight MS-C2966-X12RLVPCMilesight MS-C2972-RFLPCMilesight MS-C5321-FPE

Milesight Cameras Use of Hard-coded Cryptographic Key

CVSS 4.0
9.2بحرانی

شرح رسمی (انگلیسی)

Specific firmware versions of Milesight AIOT cameras use SSL certificates with default private keys.

امتیازهای CVSS

امتیازنسخهمنبعبردار
9.2بحرانی 4.0 CVEProject cvelistV5 (CNA) (icscert) CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
9.8بحرانی 3.1 CVEProject cvelistV5 (CNA) (icscert) CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

محصولات آسیب‌پذیر

فروشندهمحصولنسخه‌هامنبع
Milesight MS-C2964-RFLPC v ≤ T_45.8.0.3-r9 CVEProject cvelistV5 (CNA)
Milesight MS-C2966-RFLWPC v ≤ T_45.8.0.3-r9 CVEProject cvelistV5 (CNA)
Milesight MS-C2966-X12RLPC v ≤ T_45.8.0.3-r9 CVEProject cvelistV5 (CNA)
Milesight MS-C2966-X12RLVPC v ≤ T_45.8.0.3-r9 CVEProject cvelistV5 (CNA)
Milesight MS-C2972-RFLPC v ≤ T_45.8.0.3-r9 CVEProject cvelistV5 (CNA)
Milesight MS-C5321-FPE v ≤ 62.8.0.4-r5 CVEProject cvelistV5 (CNA)
Milesight MS-C5361-X12LPC v ≤ T_45.8.0.3-r9 CVEProject cvelistV5 (CNA)
Milesight MS-C5366-X12LPC v ≤ T_45.8.0.3-r9 CVEProject cvelistV5 (CNA)
Milesight MS-C5366-X12LVPC v ≤ T_45.8.0.3-r9 CVEProject cvelistV5 (CNA)
Milesight MS-C8477-HPG1 v ≤ 63.8.0.4-r3 CVEProject cvelistV5 (CNA)
Milesight MS-C8477-PC v ≤ 48.8.0.4-r3 CVEProject cvelistV5 (CNA)
Milesight MS-CQxx31-xxxG1 v ≤ CQ_63.8.0.5-r1 CVEProject cvelistV5 (CNA)
Milesight MS-CQxx68-xxxG1 v ≤ CQ_63.8.0.5-r1 CVEProject cvelistV5 (CNA)
Milesight MS-CQxx72-xxxG1 v ≤ CQ_63.8.0.5-r1 CVEProject cvelistV5 (CNA)
Milesight MS-Cxx41-xxxPE v ≤ 61.8.0.5-r2 CVEProject cvelistV5 (CNA)
Milesight MS-Cxx52-xxxPE v ≤ 61.8.0.5-r2 CVEProject cvelistV5 (CNA)
Milesight MS-Cxx61-xxxPE v ≤ 61.8.0.5-r2 CVEProject cvelistV5 (CNA)
Milesight MS-Cxx62-xxxG1 v ≤ 63.8.0.5-r3 CVEProject cvelistV5 (CNA)
Milesight MS-Cxx62-xxxPE v ≤ 61.8.0.5-r2 CVEProject cvelistV5 (CNA)
Milesight MS-Cxx63-PD v ≤ 51.7.0.77-r12 CVEProject cvelistV5 (CNA)
Milesight MS-Cxx64-xPD v ≤ 51.7.0.77-r12 CVEProject cvelistV5 (CNA)
Milesight MS-Cxx65-PE v ≤ 61.8.0.5-r2 CVEProject cvelistV5 (CNA)
Milesight MS-Cxx66-FIPKG1 v ≤ 63.8.0.4-r1-NX CVEProject cvelistV5 (CNA)
Milesight MS-Cxx66-RFIPKG1 v ≤ 63.8.0.4-r1-NX CVEProject cvelistV5 (CNA)
Milesight MS-Cxx66-xxxG1 v ≤ 63.8.0.5-r3 CVEProject cvelistV5 (CNA)
Milesight MS-Cxx66-xxxGPE v ≤ 61.8.0.5-r2 CVEProject cvelistV5 (CNA)
Milesight MS-Cxx66-xxxPE v ≤ 61.8.0.5-r2 CVEProject cvelistV5 (CNA)
Milesight MS-Cxx66-xxxxGOPC v ≤ 45.8.0.2-AIoT-r4 CVEProject cvelistV5 (CNA)
Milesight MS-Cxx67-xxxPE v ≤ 61.8.0.5-r2 CVEProject cvelistV5 (CNA)
Milesight MS-Cxx71-xxxPE v ≤ 61.8.0.5-r2 CVEProject cvelistV5 (CNA)
Milesight MS-Cxx72-FIPKG1 v ≤ 63.8.0.4-r1-NX CVEProject cvelistV5 (CNA)
Milesight MS-Cxx72-RFIPKG1 v ≤ 63.8.0.4-r1-NX CVEProject cvelistV5 (CNA)
Milesight MS-Cxx72-xxxG1 v ≤ 63.8.0.5-r3 CVEProject cvelistV5 (CNA)
Milesight MS-Cxx72-xxxPE v ≤ 61.8.0.5-r2 CVEProject cvelistV5 (CNA)
Milesight MS-Cxx73-xPD v ≤ 51.7.0.77-r12 CVEProject cvelistV5 (CNA)
Milesight MS-Cxx74-PA v ≤ 3x.8.0.3-r11 CVEProject cvelistV5 (CNA)
Milesight MS-Cxx75-xxPD v ≤ 51.7.0.77-r12 CVEProject cvelistV5 (CNA)
Milesight MS-Cxx76-PE v ≤ 61.8.0.5-r2 CVEProject cvelistV5 (CNA)
Milesight MS-Cxx83-xPD v ≤ 51.7.0.77-r12 CVEProject cvelistV5 (CNA)
Milesight MS-Nxxxx-NxE v ≤ 7x.9.0.19-r5 CVEProject cvelistV5 (CNA)
Milesight MS-Nxxxx-xxC v ≤ 7x.9.0.19-r5 CVEProject cvelistV5 (CNA)
Milesight MS-Nxxxx-xxE v ≤ 7x.9.0.19-r5 CVEProject cvelistV5 (CNA)
Milesight MS-Nxxxx-xxG v ≤ 7x.9.0.19-r5 CVEProject cvelistV5 (CNA)
Milesight MS-Nxxxx-xxH v ≤ 7x.9.0.19-r5 CVEProject cvelistV5 (CNA)
Milesight MS-Nxxxx-xxT v ≤ 7x.9.0.19-r5 CVEProject cvelistV5 (CNA)
Milesight PM3322-E v ≤ PI_61.8.0.3_LPR-r3 CVEProject cvelistV5 (CNA)
Milesight PMC8266-FGPE v ≤ PO_61.8.0.4_LPR CVEProject cvelistV5 (CNA)
Milesight PMC8266-FPE v ≤ PO_61.8.0.4_LPR CVEProject cvelistV5 (CNA)
Milesight SC211 v ≤ C_21.1.0.8-r4 CVEProject cvelistV5 (CNA)
Milesight SP111 v ≤ 52.8.0.4-r5 CVEProject cvelistV5 (CNA)
Milesight TS2841-X36TPC v ≤ T_45.8.0.3-r9 CVEProject cvelistV5 (CNA)
Milesight TS2841-X36TPC/W v ≤ T_45.8.0.3-r9 CVEProject cvelistV5 (CNA)
Milesight TS2866-X4TGPC v ≤ T_45.8.0.3-r9 CVEProject cvelistV5 (CNA)
Milesight TS2866-X4TPC v ≤ T_45.8.0.3-r9 CVEProject cvelistV5 (CNA)
Milesight TS2866-X4TVPC v ≤ T_45.8.0.3-r9 CVEProject cvelistV5 (CNA)
Milesight TS2867-X5TPC v ≤ T_45.8.0.3-r9 CVEProject cvelistV5 (CNA)
Milesight TS2961-X12TPC v ≤ T_45.8.0.3-r9 CVEProject cvelistV5 (CNA)
Milesight TS2966-X12TPE v ≤ T_61.8.0.4_LPR-r3 CVEProject cvelistV5 (CNA)
Milesight TS2966-X12TVPE v ≤ T_61.8.0.4_LPR-r3 CVEProject cvelistV5 (CNA)
Milesight TS4441-X36RE v ≤ T_61.8.0.4_LPR-r3 CVEProject cvelistV5 (CNA)
Milesight TS4441-X36RPE v ≤ T_61.8.0.4_LPR-r3 CVEProject cvelistV5 (CNA)
Milesight TS4466-RFIVPG1 v ≤ T_63.8.0.4_LPR-r3 CVEProject cvelistV5 (CNA)
Milesight TS4466-X4RIPG1 v ≤ T_63.8.0.4_LPR-r3 CVEProject cvelistV5 (CNA)
Milesight TS4466-X4RIVPG1 v ≤ T_63.8.0.4_LPR-r3 CVEProject cvelistV5 (CNA)
Milesight TS4466-X4RIWG1 v ≤ T_63.8.0.4_LPR-r3 CVEProject cvelistV5 (CNA)
Milesight TS4466-X4RPE v ≤ T_61.8.0.4_LPR-r3 CVEProject cvelistV5 (CNA)
Milesight TS4466-X4RVPE v ≤ T_61.8.0.4_LPR-r3 CVEProject cvelistV5 (CNA)
Milesight TS4466-X4RWE v ≤ T_61.8.0.4_LPR-r3 CVEProject cvelistV5 (CNA)
Milesight TS5366-X12PE v ≤ T_61.8.0.4_LPR-r3 CVEProject cvelistV5 (CNA)
Milesight TS5366-X12RIPG1 v ≤ T_63.8.0.4_LPR-r3 CVEProject cvelistV5 (CNA)
Milesight TS5366-X12VPE v ≤ T_61.8.0.4_LPR-r3 CVEProject cvelistV5 (CNA)
Milesight TS5510-GH v ≤ T_47.8.0.4_LPR-r6 CVEProject cvelistV5 (CNA)
Milesight TS5510-GVH v ≤ T_47.8.0.4_LPR-r7 CVEProject cvelistV5 (CNA)
Milesight TS5511-GVH v ≤ T_47.8.0.4_LPR-r6 CVEProject cvelistV5 (CNA)
Milesight TS8266-FPC/P v ≤ T_45.8.0.3-r9 CVEProject cvelistV5 (CNA)
Milesight TS8266-RFIVPG1 v ≤ T_63.8.0.4_LPR-r3 CVEProject cvelistV5 (CNA)
Milesight TS8266-X4PE v ≤ T_61.8.0.4_LPR-r3 CVEProject cvelistV5 (CNA)
Milesight TS8266-X4RIPG1 v ≤ T_63.8.0.4_LPR-r3 CVEProject cvelistV5 (CNA)
Milesight TS8266-X4RIVPG1 v ≤ T_63.8.0.4_LPR-r3 CVEProject cvelistV5 (CNA)
Milesight TS8266-X4RIWG1 v ≤ T_63.8.0.4_LPR-r3 CVEProject cvelistV5 (CNA)
Milesight TS8266-X4VPE v ≤ T_61.8.0.4_LPR-r3 CVEProject cvelistV5 (CNA)
Milesight TS8266-X4WE v ≤ T_61.8.0.4_LPR-r3 CVEProject cvelistV5 (CNA)

منابع و راهنماها

۳
هشدار CVEهای بعدی این محصولمحصول را دنبال کنید تا آسیب‌پذیری‌های تازه را در تلگرام بگیرید.

اطلاعات

تاریخ انتشار
۱۴۰۵/۰۲/۰۸
آخرین به‌روزرسانی
۱۴۰۵/۰۲/۰۸
وضعیت
منتشرشده
صادرکننده (CNA)
icscert

پیش‌بینی بهره‌برداری (EPSS)

۰٫۲۱٪
احتمال بهره‌برداری در ۳۰ روز
۱۲٫۳٪
صدک (نسبت به همه‌ی CVEها)

ارزیابی SSVC (CISA)

قابل خودکارسازی
بله
وضعیت بهره‌برداری
ندارد
اثر فنی
کامل

ضعف‌ها (CWE)

  • CWE-321