CVE-2023-30466 Authentication Bypass Vulnerability in Milesight Network Video Recorder (NVR)
A weak password reset mechanism in Milesight NVRs allows remote attackers to take over accounts via crafted HTTP requests.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-30466?
CVE-2023-30466 is a critical authentication bypass vulnerability in Milesight NVR MS-Nxxxx-xxC, published on 28 Apr 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
This vulnerability exists in Milesight 4K/H.265 Series NVR models (MS-Nxxxx-xxG, MS-Nxxxx-xxE, MS-Nxxxx-xxT, MS-Nxxxx-xxH and MS-Nxxxx-xxC), due to a weak password reset mechanism at the Milesight NVR web-based management interface. A remote attacker could exploit this vulnerability by sending a specially crafted http requests on the targeted device.
Successful exploitation of this vulnerability could allow remote attacker to account takeover on the targeted device.
Weakness: CWE-640
Which versions are affected by CVE-2023-30466?
It affects 21 products.
Products include Milesight Ms-N1004-Uc Firmware, Milesight Ms-N1004-Upc Firmware, Milesight Ms-N1008-Uc Firmware, Milesight Ms-N1008-Unc Firmware, Milesight Ms-N1008-Unpc Firmware, Milesight Ms-N1008-Upc Firmware and 15 more.
How do I fix CVE-2023-30466?
No fix has been published for CVE-2023-30466 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2023-30466 being exploited?
There is no known exploitation of CVE-2023-30466 in the wild and no public exploit code.
Other vulnerabilities in Milesight NVR MS-Nxxxx-xxC
Sources
Also known as GHSA-jpv9-5pvw-6mc2.