CVE-2023-30466 : This vulnerability exists in Milesight 4K/H.265 Series NVR models (MS-Nxxxx-xxG, MS-Nxxxx-xxE, MS-Nxxxx-xxT, MS-Nxxxx-xx

This vulnerability exists in Milesight 4K/H.265 Series NVR models (MS-Nxxxx-xxG, MS-Nxxxx-xxE, MS-Nxxxx-xxT, MS-Nxxxx-xxH and MS-Nxxxx-xxC), due to a weak password reset mechanism at the Milesight NVR web-based management interface. A remote attacker could exploit this vulnerability by sending a specially crafted http requests on the targeted device. Successful exploitation of this vulnerability could allow remote attacker to account takeover on the targeted device.

Published 2023-04-28 11:15:09

Updated 2023-05-05 17:27:07

Source Indian Computer Emergency Response Team (CERT-In)

View at NVD, CVE.org

Vulnerability category: XML external entity (XXE) injection

Exploit prediction scoring system (EPSS) score for CVE-2023-30466

EPSS FAQ

0.29%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 69 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2023-30466

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
9.8	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	3.9	5.9	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High
9.8	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	3.9	5.9	Indian Computer Emergency Response Team (CERT-In)
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE ids for CVE-2023-30466

CWE-640 Weak Password Recovery Mechanism for Forgotten Password

The product contains a mechanism for users to recover or change their passwords without knowing the original password, but the mechanism is weak.

Assigned by:

nvd@nist.gov (Primary)
vdisclose@cert-in.org.in (Secondary)

Products affected by CVE-2023-30466

Milesight » Ms-n5008-uc Firmware
Versions before (<) 73.9.0.18-r2
cpe:2.3:o:milesight:ms-n5008-uc_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Milesight » Ms-n5008-uc » Version: N/A
Milesight » Ms-n1008-unc Firmware
Versions before (<) 73.9.0.18-r2
cpe:2.3:o:milesight:ms-n1008-unc_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Milesight » Ms-n1008-unc » Version: N/A
Milesight » Ms-n1008-uc Firmware
Versions before (<) 73.9.0.18-r2
cpe:2.3:o:milesight:ms-n1008-uc_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Milesight » Ms-n1008-uc » Version: N/A
Milesight » Ms-n1004-uc Firmware
Versions before (<) 73.9.0.18-r2
cpe:2.3:o:milesight:ms-n1004-uc_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Milesight » Ms-n1004-uc » Version: N/A
Milesight » Ms-n5016-e Firmware
Versions before (<) 75.9.0.18-r2
cpe:2.3:o:milesight:ms-n5016-e_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Milesight » Ms-n5016-e » Version: N/A
Milesight » Ms-n5008-e Firmware
Versions before (<) 75.9.0.18-r2
cpe:2.3:o:milesight:ms-n5008-e_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Milesight » Ms-n5008-e » Version: N/A
Milesight » Ms-n7016-uh Firmware
Versions before (<) 71.9.0.18-r2
cpe:2.3:o:milesight:ms-n7016-uh_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Milesight » Ms-n7016-uh » Version: N/A
Milesight » Ms-n7032-uh Firmware
Versions before (<) 71.9.0.18-r2
cpe:2.3:o:milesight:ms-n7032-uh_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Milesight » Ms-n7032-uh » Version: N/A
Milesight » Ms-n8064-uh Firmware
Versions before (<) 71.9.0.18-r2
cpe:2.3:o:milesight:ms-n8064-uh_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Milesight » Ms-n8064-uh » Version: N/A
Milesight » Ms-n8032-uh Firmware
Versions before (<) 71.9.0.18-r2
cpe:2.3:o:milesight:ms-n8032-uh_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Milesight » Ms-n8032-uh » Version: N/A
Milesight » Ms-n1004-upc Firmware
Versions before (<) 73.9.0.18-r2
cpe:2.3:o:milesight:ms-n1004-upc_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Milesight » Ms-n1004-upc » Version: N/A
Milesight » Ms-n1008-upc Firmware
Versions before (<) 73.9.0.18-r2
cpe:2.3:o:milesight:ms-n1008-upc_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Milesight » Ms-n1008-upc » Version: N/A
Milesight » Ms-n1008-unpc Firmware
Versions before (<) 73.9.0.18-r2
cpe:2.3:o:milesight:ms-n1008-unpc_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Milesight » Ms-n1008-unpc » Version: N/A
Milesight » Ms-n5008-upc Firmware
Versions before (<) 73.9.0.18-r2
cpe:2.3:o:milesight:ms-n5008-upc_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Milesight » Ms-n5008-upc » Version: N/A
Milesight » Ms-n5016-pe Firmware
Versions before (<) 75.9.0.18-r2
cpe:2.3:o:milesight:ms-n5016-pe_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Milesight » Ms-n5016-pe » Version: N/A
Milesight » Ms-n5008-pe Firmware
Versions before (<) 75.9.0.18-r2
cpe:2.3:o:milesight:ms-n5008-pe_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Milesight » Ms-n5008-pe » Version: N/A
Milesight » Ms-n7016-uph Firmware
Versions before (<) 71.9.0.18-r2
cpe:2.3:o:milesight:ms-n7016-uph_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Milesight » Ms-n7016-uph » Version: N/A
Milesight » Ms-n7032-uph Firmware
Versions before (<) 71.9.0.18-r2
cpe:2.3:o:milesight:ms-n7032-uph_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Milesight » Ms-n7032-uph » Version: N/A
Milesight » Ms-n7048-uph Firmware
Versions before (<) 71.9.0.18-r2
cpe:2.3:o:milesight:ms-n7048-uph_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Milesight » Ms-n7048-uph » Version: N/A
Milesight » Ms-nxxxx-xxg Firmware
Versions before (<) 77.9.0.18-r2
cpe:2.3:o:milesight:ms-nxxxx-xxg_firmware:*:*:*:*:*:*:*:*
Matching versions
Milesight » Ms-nxxxx-xxt Firmware
Versions before (<) 72.9.0.18-r2
cpe:2.3:o:milesight:ms-nxxxx-xxt_firmware:*:*:*:*:*:*:*:*
Matching versions

Vulnerability Details : CVE-2023-30466

Exploit prediction scoring system (EPSS) score for CVE-2023-30466

CVSS scores for CVE-2023-30466

CWE ids for CVE-2023-30466

References for CVE-2023-30466

Products affected by CVE-2023-30466