جزئیات آسیب‌پذیری

CVE-2026-32649

Milesight MS-C2964-RFLPCMilesight MS-C2966-RFLWPCMilesight MS-C2966-X12RLPCMilesight MS-C2966-X12RLVPCMilesight MS-C2972-RFLPCMilesight MS-C5321-FPE

Milesight Cameras OS Command Injection

CVSS 4.0
7.3بالا

شرح رسمی (انگلیسی)

A command injection vulnerability exists in the web server of specific firmware versions of Milesight cameras.

امتیازهای CVSS

امتیازنسخهمنبعبردار
7.3بالا 4.0 CVEProject cvelistV5 (CNA) (icscert) CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
6.8متوسط 3.1 CVEProject cvelistV5 (CNA) (icscert) CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H

محصولات آسیب‌پذیر

فروشندهمحصولنسخه‌هامنبع
Milesight MS-C2964-RFLPC v ≤ T_45.8.0.3-r9 CVEProject cvelistV5 (CNA)
Milesight MS-C2966-RFLWPC v ≤ T_45.8.0.3-r9 CVEProject cvelistV5 (CNA)
Milesight MS-C2966-X12RLPC v ≤ T_45.8.0.3-r9 CVEProject cvelistV5 (CNA)
Milesight MS-C2966-X12RLVPC v ≤ T_45.8.0.3-r9 CVEProject cvelistV5 (CNA)
Milesight MS-C2972-RFLPC v ≤ T_45.8.0.3-r9 CVEProject cvelistV5 (CNA)
Milesight MS-C5321-FPE v ≤ 62.8.0.4-r5 CVEProject cvelistV5 (CNA)
Milesight MS-C5361-X12LPC v ≤ T_45.8.0.3-r9 CVEProject cvelistV5 (CNA)
Milesight MS-C5366-X12LPC v ≤ T_45.8.0.3-r9 CVEProject cvelistV5 (CNA)
Milesight MS-C5366-X12LVPC v ≤ T_45.8.0.3-r9 CVEProject cvelistV5 (CNA)
Milesight MS-C8477-HPG1 v ≤ 63.8.0.4-r3 CVEProject cvelistV5 (CNA)
Milesight MS-C8477-PC v ≤ 48.8.0.4-r3 CVEProject cvelistV5 (CNA)
Milesight MS-CQxx31-xxxG1 v ≤ CQ_63.8.0.5-r1 CVEProject cvelistV5 (CNA)
Milesight MS-CQxx68-xxxG1 v ≤ CQ_63.8.0.5-r1 CVEProject cvelistV5 (CNA)
Milesight MS-CQxx72-xxxG1 v ≤ CQ_63.8.0.5-r1 CVEProject cvelistV5 (CNA)
Milesight MS-Cxx41-xxxPE v ≤ 61.8.0.5-r2 CVEProject cvelistV5 (CNA)
Milesight MS-Cxx52-xxxPE v ≤ 61.8.0.5-r2 CVEProject cvelistV5 (CNA)
Milesight MS-Cxx61-xxxPE v ≤ 61.8.0.5-r2 CVEProject cvelistV5 (CNA)
Milesight MS-Cxx62-xxxG1 v ≤ 63.8.0.5-r3 CVEProject cvelistV5 (CNA)
Milesight MS-Cxx62-xxxPE v ≤ 61.8.0.5-r2 CVEProject cvelistV5 (CNA)
Milesight MS-Cxx63-PD v ≤ 51.7.0.77-r12 CVEProject cvelistV5 (CNA)
Milesight MS-Cxx64-xPD v ≤ 51.7.0.77-r12 CVEProject cvelistV5 (CNA)
Milesight MS-Cxx65-PE v ≤ 61.8.0.5-r2 CVEProject cvelistV5 (CNA)
Milesight MS-Cxx66-FIPKG1 v ≤ 63.8.0.4-r1-NX CVEProject cvelistV5 (CNA)
Milesight MS-Cxx66-RFIPKG1 v ≤ 63.8.0.4-r1-NX CVEProject cvelistV5 (CNA)
Milesight MS-Cxx66-xxxG1 v ≤ 63.8.0.5-r3 CVEProject cvelistV5 (CNA)
Milesight MS-Cxx66-xxxGPE v ≤ 61.8.0.5-r2 CVEProject cvelistV5 (CNA)
Milesight MS-Cxx66-xxxPE v ≤ 61.8.0.5-r2 CVEProject cvelistV5 (CNA)
Milesight MS-Cxx66-xxxxGOPC v ≤ 45.8.0.2-AIoT-r4 CVEProject cvelistV5 (CNA)
Milesight MS-Cxx67-xxxPE v ≤ 61.8.0.5-r2 CVEProject cvelistV5 (CNA)
Milesight MS-Cxx71-xxxPE v ≤ 61.8.0.5-r2 CVEProject cvelistV5 (CNA)
Milesight MS-Cxx72-FIPKG1 v ≤ 63.8.0.4-r1-NX CVEProject cvelistV5 (CNA)
Milesight MS-Cxx72-RFIPKG1 v ≤ 63.8.0.4-r1-NX CVEProject cvelistV5 (CNA)
Milesight MS-Cxx72-xxxG1 v ≤ 63.8.0.5-r3 CVEProject cvelistV5 (CNA)
Milesight MS-Cxx72-xxxPE v ≤ 61.8.0.5-r2 CVEProject cvelistV5 (CNA)
Milesight MS-Cxx73-xPD v ≤ 51.7.0.77-r12 CVEProject cvelistV5 (CNA)
Milesight MS-Cxx74-PA v ≤ 3x.8.0.3-r11 CVEProject cvelistV5 (CNA)
Milesight MS-Cxx75-xxPD v ≤ 51.7.0.77-r12 CVEProject cvelistV5 (CNA)
Milesight MS-Cxx76-PE v ≤ 61.8.0.5-r2 CVEProject cvelistV5 (CNA)
Milesight MS-Cxx83-xPD v ≤ 51.7.0.77-r12 CVEProject cvelistV5 (CNA)
Milesight MS-Nxxxx-NxE v ≤ 7x.9.0.19-r5 CVEProject cvelistV5 (CNA)
Milesight MS-Nxxxx-xxC v ≤ 7x.9.0.19-r5 CVEProject cvelistV5 (CNA)
Milesight MS-Nxxxx-xxE v ≤ 7x.9.0.19-r5 CVEProject cvelistV5 (CNA)
Milesight MS-Nxxxx-xxG v ≤ 7x.9.0.19-r5 CVEProject cvelistV5 (CNA)
Milesight MS-Nxxxx-xxH v ≤ 7x.9.0.19-r5 CVEProject cvelistV5 (CNA)
Milesight MS-Nxxxx-xxT v ≤ 7x.9.0.19-r5 CVEProject cvelistV5 (CNA)
Milesight PM3322-E v ≤ PI_61.8.0.3_LPR-r3 CVEProject cvelistV5 (CNA)
Milesight PMC8266-FGPE v ≤ PO_61.8.0.4_LPR CVEProject cvelistV5 (CNA)
Milesight PMC8266-FPE v ≤ PO_61.8.0.4_LPR CVEProject cvelistV5 (CNA)
Milesight SC211 v ≤ C_21.1.0.8-r4 CVEProject cvelistV5 (CNA)
Milesight SP111 v ≤ 52.8.0.4-r5 CVEProject cvelistV5 (CNA)
Milesight TS2841-X36TPC v ≤ T_45.8.0.3-r9 CVEProject cvelistV5 (CNA)
Milesight TS2841-X36TPC/W v ≤ T_45.8.0.3-r9 CVEProject cvelistV5 (CNA)
Milesight TS2866-X4TGPC v ≤ T_45.8.0.3-r9 CVEProject cvelistV5 (CNA)
Milesight TS2866-X4TPC v ≤ T_45.8.0.3-r9 CVEProject cvelistV5 (CNA)
Milesight TS2866-X4TVPC v ≤ T_45.8.0.3-r9 CVEProject cvelistV5 (CNA)
Milesight TS2867-X5TPC v ≤ T_45.8.0.3-r9 CVEProject cvelistV5 (CNA)
Milesight TS2961-X12TPC v ≤ T_45.8.0.3-r9 CVEProject cvelistV5 (CNA)
Milesight TS2966-X12TPE v ≤ T_61.8.0.4_LPR-r3 CVEProject cvelistV5 (CNA)
Milesight TS2966-X12TVPE v ≤ T_61.8.0.4_LPR-r3 CVEProject cvelistV5 (CNA)
Milesight TS4441-X36RE v ≤ T_61.8.0.4_LPR-r3 CVEProject cvelistV5 (CNA)
Milesight TS4441-X36RPE v ≤ T_61.8.0.4_LPR-r3 CVEProject cvelistV5 (CNA)
Milesight TS4466-RFIVPG1 v ≤ T_63.8.0.4_LPR-r3 CVEProject cvelistV5 (CNA)
Milesight TS4466-X4RIPG1 v ≤ T_63.8.0.4_LPR-r3 CVEProject cvelistV5 (CNA)
Milesight TS4466-X4RIVPG1 v ≤ T_63.8.0.4_LPR-r3 CVEProject cvelistV5 (CNA)
Milesight TS4466-X4RIWG1 v ≤ T_63.8.0.4_LPR-r3 CVEProject cvelistV5 (CNA)
Milesight TS4466-X4RPE v ≤ T_61.8.0.4_LPR-r3 CVEProject cvelistV5 (CNA)
Milesight TS4466-X4RVPE v ≤ T_61.8.0.4_LPR-r3 CVEProject cvelistV5 (CNA)
Milesight TS4466-X4RWE v ≤ T_61.8.0.4_LPR-r3 CVEProject cvelistV5 (CNA)
Milesight TS5366-X12PE v ≤ T_61.8.0.4_LPR-r3 CVEProject cvelistV5 (CNA)
Milesight TS5366-X12RIPG1 v ≤ T_63.8.0.4_LPR-r3 CVEProject cvelistV5 (CNA)
Milesight TS5366-X12VPE v ≤ T_61.8.0.4_LPR-r3 CVEProject cvelistV5 (CNA)
Milesight TS5510-GH v ≤ T_47.8.0.4_LPR-r6 CVEProject cvelistV5 (CNA)
Milesight TS5510-GVH v ≤ T_47.8.0.4_LPR-r7 CVEProject cvelistV5 (CNA)
Milesight TS5511-GVH v ≤ T_47.8.0.4_LPR-r6 CVEProject cvelistV5 (CNA)
Milesight TS8266-FPC/P v ≤ T_45.8.0.3-r9 CVEProject cvelistV5 (CNA)
Milesight TS8266-RFIVPG1 v ≤ T_63.8.0.4_LPR-r3 CVEProject cvelistV5 (CNA)
Milesight TS8266-X4PE v ≤ T_61.8.0.4_LPR-r3 CVEProject cvelistV5 (CNA)
Milesight TS8266-X4RIPG1 v ≤ T_63.8.0.4_LPR-r3 CVEProject cvelistV5 (CNA)
Milesight TS8266-X4RIVPG1 v ≤ T_63.8.0.4_LPR-r3 CVEProject cvelistV5 (CNA)
Milesight TS8266-X4RIWG1 v ≤ T_63.8.0.4_LPR-r3 CVEProject cvelistV5 (CNA)
Milesight TS8266-X4VPE v ≤ T_61.8.0.4_LPR-r3 CVEProject cvelistV5 (CNA)
Milesight TS8266-X4WE v ≤ T_61.8.0.4_LPR-r3 CVEProject cvelistV5 (CNA)

منابع و راهنماها

۳
هشدار CVEهای بعدی این محصولمحصول را دنبال کنید تا آسیب‌پذیری‌های تازه را در تلگرام بگیرید.

اطلاعات

تاریخ انتشار
۱۴۰۵/۰۲/۰۸
آخرین به‌روزرسانی
۱۴۰۵/۰۲/۰۸
وضعیت
منتشرشده
صادرکننده (CNA)
icscert

پیش‌بینی بهره‌برداری (EPSS)

۰٫۸۶٪
احتمال بهره‌برداری در ۳۰ روز
۵۸٫۷٪
صدک (نسبت به همه‌ی CVEها)

ارزیابی SSVC (CISA)

قابل خودکارسازی
خیر
وضعیت بهره‌برداری
ندارد
اثر فنی
کامل

ضعف‌ها (CWE)

  • CWE-78