VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Apr 28, 2023· Updated Jun 17, 2026

CVE-2023-30466

CVE-2023-30466

Description

This vulnerability exists in Milesight 4K/H.265 Series NVR models (MS-Nxxxx-xxG, MS-Nxxxx-xxE, MS-Nxxxx-xxT, MS-Nxxxx-xxH and MS-Nxxxx-xxC), due to a weak password reset mechanism at the Milesight NVR web-based management interface. A remote attacker could exploit this vulnerability by sending a specially crafted http requests on the targeted device.

Successful exploitation of this vulnerability could allow remote attacker to account takeover on the targeted device.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6
  • Milesight/4K/H.265 Series NVRllm-fuzzy
  • Milesight/NVR MS-Nxxxx-xxCv5
    Range: 73.X
  • Milesight/NVR MS-Nxxxx-xxEv5
    Range: 75.X
  • Milesight/NVR MS-Nxxxx-xxGv5
    Range: 77.X
  • Milesight/NVR MS-Nxxxx-xxHv5
    Range: 71.X
  • Milesight/NVR MS-Nxxxx-xxTv5
    Range: 72.X

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.