Milesight Ms-n8064-Uh Firmware vulnerabilities

2 CVEs affecting Milesight Ms-n8064-Uh Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-30467, published 2023-04-28.

More from Milesight.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2023-30466, published 2023-04-28. Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days. This vulnerability exists in Milesight 4K/H.265 Series NVR models (MS-Nxxxx-xxG, MS-Nxxxx-xxE, MS-Nxxxx-xxT, MS-Nxxxx-xxH and MS-Nxxxx-xxC), due to a weak password reset mechanism at the Milesight…
• CVE-2023-30467, published 2023-04-28. Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days. This vulnerability exists in Milesight 4K/H.265 Series NVR models (MS-Nxxxx-xxG, MS-Nxxxx-xxE, MS-Nxxxx-xxT, MS-Nxxxx-xxH and MS-Nxxxx-xxC), due to improper authorization at the Milesight NVR…