CVE-2023-30466: Milesight Ms-n1004-Uc Firmware

Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days.

This vulnerability exists in Milesight 4K/H.265 Series NVR models (MS-Nxxxx-xxG, MS-Nxxxx-xxE, MS-Nxxxx-xxT, MS-Nxxxx-xxH and MS-Nxxxx-xxC), due to a weak password reset mechanism at the Milesight NVR web-based management interface. A remote attacker could exploit this vulnerability by sending a specially crafted http requests on the targeted device. Successful exploitation of this vulnerability could allow remote attacker to account takeover on the targeted device.

Affected products

  • Milesight Ms-n1004-Uc Firmware: before 73.9.0.18-r2 (fixed in 73.9.0.18-r2)
  • Milesight Ms-n1004-Upc Firmware: before 73.9.0.18-r2 (fixed in 73.9.0.18-r2)
  • Milesight Ms-n1008-Uc Firmware: before 73.9.0.18-r2 (fixed in 73.9.0.18-r2)
  • Milesight Ms-n1008-Unc Firmware: before 73.9.0.18-r2 (fixed in 73.9.0.18-r2)
  • Milesight Ms-n1008-Unpc Firmware: before 73.9.0.18-r2 (fixed in 73.9.0.18-r2)
  • Milesight Ms-n1008-Upc Firmware: before 73.9.0.18-r2 (fixed in 73.9.0.18-r2)
  • Milesight Ms-n5008-E Firmware: before 75.9.0.18-r2 (fixed in 75.9.0.18-r2)
  • Milesight Ms-n5008-Pe Firmware: before 75.9.0.18-r2 (fixed in 75.9.0.18-r2)
  • Milesight Ms-n5008-Uc Firmware: before 73.9.0.18-r2 (fixed in 73.9.0.18-r2)
  • Milesight Ms-n5008-Upc Firmware: before 73.9.0.18-r2 (fixed in 73.9.0.18-r2)
  • Milesight Ms-n5016-E Firmware: before 75.9.0.18-r2 (fixed in 75.9.0.18-r2)
  • Milesight Ms-n5016-Pe Firmware: before 75.9.0.18-r2 (fixed in 75.9.0.18-r2)
  • Milesight Ms-n7016-Uh Firmware: before 71.9.0.18-r2 (fixed in 71.9.0.18-r2)
  • Milesight Ms-n7016-Uph Firmware: before 71.9.0.18-r2 (fixed in 71.9.0.18-r2)
  • Milesight Ms-n7032-Uh Firmware: before 71.9.0.18-r2 (fixed in 71.9.0.18-r2)
  • Milesight Ms-n7032-Uph Firmware: before 71.9.0.18-r2 (fixed in 71.9.0.18-r2)
  • Milesight Ms-n7048-Uph Firmware: before 71.9.0.18-r2 (fixed in 71.9.0.18-r2)
  • Milesight Ms-n8032-Uh Firmware: before 71.9.0.18-r2 (fixed in 71.9.0.18-r2)
  • Milesight Ms-n8064-Uh Firmware: before 71.9.0.18-r2 (fixed in 71.9.0.18-r2)
  • Milesight Ms-Nxxxx-Xxg Firmware: before 77.9.0.18-r2 (fixed in 77.9.0.18-r2)
  • Milesight Ms-Nxxxx-Xxt Firmware: before 72.9.0.18-r2 (fixed in 72.9.0.18-r2)

Published 2023-04-28. Last modified 2026-06-17.