Approved changes feed: RSS · Atom

cpe:2.3:a:milesight:devicehub:3.0.1-r1:*:*:*:regular:*:*:*

part: a version: 3.0.1-r1 update: *

VendorMilesight (29e512ed-02e7-5a62-9acc-b8e7195e4ebe)
ProductDevicehub (5c723376-4521-5cc0-b854-e441181160f8)
Edition*
Language*
Software editionregular
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-36392 vulnerable 2026-06-03 14:56:04.275907 MileSight DeviceHub - CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
MEDIUM (6.1)
MileSight DeviceHub - CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published: 2024-06-02T13:24:33.806Z
Updated: 2024-08-02T03:37:05.325Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-36391 vulnerable 2026-06-03 14:56:04.275440 MileSight DeviceHub - CWE-320: Key Management Errors
CRITICAL (9.1)
MileSight DeviceHub - CWE-320: Key Management Errors may allow Authentication Bypass and Man-In-The-Middle Traffic
Published: 2024-06-02T13:23:28.345Z
Updated: 2024-08-02T03:37:04.857Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-36390 vulnerable 2026-06-03 14:56:04.275022 MileSight DeviceHub - CWE-20 Improper Input Validation
HIGH (7.5)
MileSight DeviceHub - CWE-20 Improper Input Validation may allow Denial of Service
Published: 2024-06-02T13:22:24.377Z
Updated: 2024-08-02T03:37:05.270Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-36389 vulnerable 2026-06-03 14:56:04.274576 MileSight DeviceHub - CWE-330 Use of Insufficiently Random Values
CRITICAL (9.8)
MileSight DeviceHub - CWE-330 Use of Insufficiently Random Values may allow Authentication Bypass
Published: 2024-06-02T13:21:11.748Z
Updated: 2024-08-02T03:37:04.960Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-36388 vulnerable 2026-06-03 14:56:04.273460 MileSight DeviceHub - CWE-305 Missing Authentication for Critical Function
CRITICAL (10)
MileSight DeviceHub - CWE-305 Missing Authentication for Critical Function
Published: 2024-06-02T13:14:46.927Z
Updated: 2024-08-02T03:37:04.924Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-27776 vulnerable 2026-06-03 14:55:17.973191 MileSight DeviceHub - CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CRITICAL (9.8)
MileSight DeviceHub - CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') may allow Unauthenticated RCE
Published: 2024-06-02T13:13:03.786Z
Updated: 2024-08-02T00:41:54.420Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.