Milesight Devicehub — known CVE vulnerabilities

Every CVE whose affected-product data names Milesight Devicehub, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2024-36388 — CVSS 10.0 (critical): MileSight DeviceHub - CWE-305 Missing Authentication for Critical Function
• CVE-2024-27776 — CVSS 9.8 (critical): MileSight DeviceHub - CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') may allow Unauthenticated RCE
• CVE-2024-36389 — CVSS 9.8 (critical): MileSight DeviceHub - CWE-330 Use of Insufficiently Random Values may allow Authentication Bypass
• CVE-2024-36391 — CVSS 9.1 (critical): MileSight DeviceHub - CWE-320: Key Management Errors may allow Authentication Bypass and Man-In-The-Middle Traffic
• CVE-2024-36390 — CVSS 7.5 (high): MileSight DeviceHub - CWE-20 Improper Input Validation may allow Denial of Service
• CVE-2024-36392 — CVSS 6.1 (medium): MileSight DeviceHub - CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')