Milestone Systems Xprotect Vms
4 CVEs affecting Milestone Systems Xprotect Vms. Latest disclosed: 2025-12-16. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-12569 | High | 7.8 | 2024-12-19 | Disclosure of sensitive information in a Milestone XProtect Device Pack driver’s log file for third-party cameras, allows an attacker to read camera credential… |
CVE-2024-3506 | Medium | 6.7 | 2024-10-08 | A possible buffer overflow in selected cameras' drivers from XProtect Device Pack can allow an attacker with access to internal network to execute commands on… |
CVE-2025-0836 | Medium | 6.3 | 2025-12-16 | Missing Authorization vulnerability in Milestone Systems XProtect VMS allows users with read-only access to Management Server to have full read/write access to… |
CVE-2025-1688 | Medium | 5.5 | 2025-04-15 | Milestone Systems has discovered a security vulnerability in Milestone XProtect installer that resets system configuration password after the upgrading from ol… |