Milesight Milesightvpn
6 CVEs affecting Milesight Milesightvpn. Latest disclosed: 2023-07-06. Critical: 0, High: 4.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-22371 | High | 8.1 | 2023-07-06 | An os command injection vulnerability exists in the liburvpn.so create_private_key functionality of Milesight VPN v2.0.2. A specially-crafted network request c… |
CVE-2023-23907 | High | 7.5 | 2023-07-06 | A directory traversal vulnerability exists in the server.js start functionality of Milesight VPN v2.0.2. A specially-crafted network request can lead to arbitr… |
CVE-2023-22844 | High | 7.3 | 2023-07-06 | An authentication bypass vulnerability exists in the requestHandlers.js verifyToken functionality of Milesight VPN v2.0.2. A specially-crafted network request… |
CVE-2023-22319 | High | 7.3 | 2023-07-06 | A sql injection vulnerability exists in the requestHandlers.js LoginAuth functionality of Milesight VPN v2.0.2. A specially-crafted network request can lead to… |
CVE-2023-24497 | Medium | 4.7 | 2023-07-06 | Cross-site scripting (xss) vulnerabilities exist in the requestHandlers.js detail_device functionality of Milesight VPN v2.0.2. A specially-crafted HTTP reques… |
CVE-2023-24496 | Medium | 4.7 | 2023-07-06 | Cross-site scripting (xss) vulnerabilities exist in the requestHandlers.js detail_device functionality of Milesight VPN v2.0.2. A specially-crafted HTTP reques… |