Default Password Vulnerability in Milesight IP Security Cameras

CVE-2016-2360

What is CVE-2016-2360?

Milesight IP security cameras, prior to November 14, 2016, are susceptible to security risks stemming from a default root password stored in the /etc/shadow file. This default password is identical across various installations, which may allow unauthorized access and control over the devices, potentially compromising user privacy and security. It is crucial for users to update their devices to mitigate this vulnerability.

References