Milesightvpn
Approved changes feed: RSS · Atom
cpe:2.3:a:milesight:milesightvpn:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Milesight (29e512ed-02e7-5a62-9acc-b8e7195e4ebe) |
|---|---|
| Product | Milesightvpn (f6c88d01-faac-532f-9067-3f21729dd9f1) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-24497 |
vulnerable | 2026-06-03 14:49:29.876732 |
Details available
MEDIUM (4.7)
Cross-site scripting (xss) vulnerabilities exist in the requestHandlers.js detail_device functionality of Milesight VPN v2.0.2. A specially-crafted HTTP request can lead to arbitrary Javascript code injection. An attacker can send an HTTP request to trigger these vulnerabilities.This XSS is exploited through the remote_subnet field of the database
Published: 2023-07-06T14:53:31.342Z
Updated: 2025-11-04T19:14:42.892Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-24496 |
vulnerable | 2026-06-03 14:49:29.876425 |
Details available
MEDIUM (4.7)
Cross-site scripting (xss) vulnerabilities exist in the requestHandlers.js detail_device functionality of Milesight VPN v2.0.2. A specially-crafted HTTP request can lead to arbitrary Javascript code injection. An attacker can send an HTTP request to trigger these vulnerabilities.This XSS is exploited through the name field of the database.
Published: 2023-07-06T14:53:31.258Z
Updated: 2025-11-04T19:14:41.808Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-23907 |
vulnerable | 2026-06-03 14:49:28.955714 |
Details available
HIGH (7.5)
A directory traversal vulnerability exists in the server.js start functionality of Milesight VPN v2.0.2. A specially-crafted network request can lead to arbitrary file read. An attacker can send a network request to trigger this vulnerability.
Published: 2023-07-06T14:53:32.531Z
Updated: 2024-08-02T10:42:27.095Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-22844 |
vulnerable | 2026-06-03 14:49:20.358441 |
Details available
HIGH (7.3)
An authentication bypass vulnerability exists in the requestHandlers.js verifyToken functionality of Milesight VPN v2.0.2. A specially-crafted network request can lead to authentication bypass. An attacker can send a network request to trigger this vulnerability.
Published: 2023-07-06T14:53:33.273Z
Updated: 2025-03-05T18:54:30.930Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-22371 |
vulnerable | 2026-06-03 14:49:18.188458 |
Details available
HIGH (8.1)
An os command injection vulnerability exists in the liburvpn.so create_private_key functionality of Milesight VPN v2.0.2. A specially-crafted network request can lead to command execution. An attacker can send a malicious packet to trigger this vulnerability.
Published: 2023-07-06T14:53:31.757Z
Updated: 2024-08-02T10:07:06.784Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-22319 |
vulnerable | 2026-06-03 14:49:17.117902 |
Details available
HIGH (7.3)
A sql injection vulnerability exists in the requestHandlers.js LoginAuth functionality of Milesight VPN v2.0.2. A specially-crafted network request can lead to authentication bypass. An attacker can send a malicious packet to trigger this vulnerability.
Published: 2023-07-06T14:53:32.886Z
Updated: 2024-11-14T14:40:36.065Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.