CVE-2016-2358: Critical severity milesight ip security camera firmware vulnerability
Milesight IP security cameras through 2016-11-14 have a default set of 10 privileged accounts with hardcoded credentials. They are accessible if the customer has not configured 10 actual user accounts.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-2358?
CVE-2016-2358 has a high severity rating due to the presence of hardcoded credentials in multiple privileged accounts.
How do I fix CVE-2016-2358?
To fix CVE-2016-2358, customers should configure unique user accounts and disable the default privileged accounts.
What devices are affected by CVE-2016-2358?
CVE-2016-2358 affects Milesight IP security cameras running firmware versions up to and including 2016-11-14.
Are there workarounds for CVE-2016-2358?
A workaround for CVE-2016-2358 is to change all default passwords for the privileged accounts as soon as possible.
What risks are associated with CVE-2016-2358?
The risks of CVE-2016-2358 include unauthorized access to the camera system and potential exploitation by attackers.