Milesight Ncr/camera Firmware vulnerabilities

3 CVEs affecting Milesight Ncr/camera Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-32220, published 2023-06-12.

More from Milesight.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2023-32220, published 2023-06-12. Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days. Milesight NCR/camera version 71.8.0.6-r5 allows authentication bypass through an unspecified method.
• CVE-2023-24506, published 2023-05-08. High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days. Milesight NCR/camera version 71.8.0.6-r5 exposes credentials through an unspecified request.
• CVE-2023-24505, published 2023-05-08. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. Milesight NCR/camera version 71.8.0.6-r5 discloses sensitive information through an unspecified request.