Unauthorized Write Access in Milesight Devices
CVE-2025-4043
6.1MEDIUM
What is CVE-2025-4043?
A security vulnerability allows an admin user to gain unauthorized write access to the /etc/rc.local file on Milesight devices. This file executes commands upon system boot, potentially leading to unauthorized modifications and exploitation of system functionality. Affected users should implement immediate remediation steps to secure their devices and prevent any unauthorized access.
Affected Version(s)
UG65-868M-EA 0 < 60.0.0.46
References
CVSS V4
Score:
6.1
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None
Timeline
Vulnerability published
Vulnerability Reserved
Credit
Joe Lovett of Pen Test Partners reported this vulnerability to CISA.