1. Home
  2. CVE Database
  3. CVE-2023-30467
HIGH · 7.5

CVE-2023-30467

This vulnerability exists in Milesight 4K/H.265 Series NVR models (MS-Nxxxx-xxG, MS-Nxxxx-xxE, MS-Nxxxx-xxT, MS-Nxxxx-xxH and MS-Nxxxx-xxC), due to improper authorization at the Milesight NVR web-base...

Vulnerability Description

This vulnerability exists in Milesight 4K/H.265 Series NVR models (MS-Nxxxx-xxG, MS-Nxxxx-xxE, MS-Nxxxx-xxT, MS-Nxxxx-xxH and MS-Nxxxx-xxC), due to improper authorization at the Milesight NVR web-based management interface. A remote attacker could exploit this vulnerability by sending a specially crafted http requests on the targeted device. Successful exploitation of this vulnerability could allow remote attacker to perform unauthorized activities on the targeted device.

CVSS Score

7.5

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH

Affected Products

VendorProductVersions
MilesightMs-N5008-Uc Firmware< 73.9.0.18-r2
MilesightMs-N5008-Uc-
MilesightMs-N1008-Unc Firmware< 73.9.0.18-r2
MilesightMs-N1008-Unc-
MilesightMs-N1008-Uc Firmware< 73.9.0.18-r2
MilesightMs-N1008-Uc-
MilesightMs-N1004-Uc Firmware< 73.9.0.18-r2
MilesightMs-N1004-Uc-
MilesightMs-N5016-E Firmware< 75.9.0.18-r2
MilesightMs-N5016-E-
MilesightMs-N5008-E Firmware< 75.9.0.18-r2
MilesightMs-N5008-E-
MilesightMs-N7016-Uh Firmware< 71.9.0.18-r2
MilesightMs-N7016-Uh-
MilesightMs-N7032-Uh Firmware< 71.9.0.18-r2
MilesightMs-N7032-Uh-
MilesightMs-N8064-Uh Firmware< 71.9.0.18-r2
MilesightMs-N8064-Uh-
MilesightMs-N8032-Uh Firmware< 71.9.0.18-r2
MilesightMs-N8032-Uh-

Related Weaknesses (CWE)

CWE-285CWE-863

References

FAQ

What is CVE-2023-30467?

CVE-2023-30467 is a vulnerability with a CVSS score of 7.5 (HIGH). This vulnerability exists in Milesight 4K/H.265 Series NVR models (MS-Nxxxx-xxG, MS-Nxxxx-xxE, MS-Nxxxx-xxT, MS-Nxxxx-xxH and MS-Nxxxx-xxC), due to improper authorization at the Milesight NVR web-base...

How severe is CVE-2023-30467?

CVE-2023-30467 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2023-30467?

Check the references section above for vendor advisories and patch information. Affected products include: Milesight Ms-N5008-Uc Firmware, Milesight Ms-N5008-Uc, Milesight Ms-N1008-Unc Firmware, Milesight Ms-N1008-Unc, Milesight Ms-N1008-Uc Firmware.