CVE-2016-2359 Milesight IP security cameras through 2016-11-14 allow remote attackers to bypass authentication and access a protected resource by simultaneously making a request for the unprotected vb.htm resource.
CriticalCVSS 9.8
EPSS 3.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Milesight IP security cameras through 2016-11-14 allow remote attackers to bypass authentication and access a protected resource by simultaneously making a request for the unprotected vb.htm resource.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Milesight ip security camera firmware | <= 2016-11-14 | No fix listed |
| Milesight IP security cameras | = through 2016-11-14 | No fix listed |
References
- kirils.org exploit third-party-advisory
- possiblesecurity.com third-party-advisory
- www.youtube.com exploit third-party-advisory