Known vulnerabilities in Milesight VPN
Vendor:
Milesight
Software:
Milesight VPN
Software CPE:
cpe:2.3:a:milesight:milesight_vpn:*:*:*:*:*:*:*:*
Website:
https://www.milesight.com/
Total vulnerabilities:
6
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
Vulnerabilities (6)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU78031 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2023-24497 |
CWE-79 | Low | - | 07.07.2023 |
SB2023070730 |
||
| #VU78030 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2023-24496 |
CWE-79 | Low | - | 07.07.2023 |
SB2023070730 |
||
| #VU78029 - Use of Hard-coded Cryptographic Key CVE-2023-22844 |
CWE-321 | Medium | - | 07.07.2023 |
SB2023070730 |
||
| #VU78028 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2023-23907 |
CWE-22 | High | - | 07.07.2023 |
SB2023070730 |
||
| #VU78027 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2023-22371 |
CWE-78 | High | - | 07.07.2023 |
SB2023070730 |
||
| #VU78026 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2023-22319 |
CWE-89 | High | - | 07.07.2023 |
SB2023070730 |