CVE-2016-2357 Milesight IP security cameras through 2016-11-14 have a hardcoded SSL private key under the /etc/config directory.
CriticalCVSS 9.8
EPSS 2.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Milesight IP security cameras through 2016-11-14 have a hardcoded SSL private key under the /etc/config directory.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Milesight ip security camera firmware | <= 2016-11-14 | No fix listed |
| Milesight IP security cameras | = through 2016-11-14 | No fix listed |
References
- kirils.org exploit third-party-advisory
- possiblesecurity.com third-party-advisory
- www.youtube.com exploit third-party-advisory