Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2022-3001

Vulnerability in Milesight Video Management Systems (VMS)

Description

This vulnerability exists in Milesight Video Management Systems (VMS), all firmware versions prior to 40.7.0.79-r1, due to improper input handling at camera’s web-based management interface. A remote attacker could exploit this vulnerability by sending a specially crafted http request on the targeted network camera. Successful exploitation of this vulnerability could allow the attacker to cause a Denial of Service condition on the targeted device.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Milesight Video Management Systems

  • VMS to < 40.7.0.79-r1affected

References