CVE-2016-2357

Milesight IP security cameras through 2016-11-14 have a hardcoded SSL private key under the /etc/config directory.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
certccCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 63%
VendorProductVersion
milesightip_security_camera_firmware
𝑥
≤ 2016-11-14
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://kirils.org/slides/2016-10-06_Milesight_initial.pdf
https://possiblesecurity.com/news/vulnerabilities-of-milesight-ip-security-cameras/
https://www.youtube.com/watch?v=scckkI7CAW0
http://kirils.org/slides/2016-10-06_Milesight_initial.pdf
https://possiblesecurity.com/news/vulnerabilities-of-milesight-ip-security-cameras/
https://www.youtube.com/watch?v=scckkI7CAW0