CVE-2023-24505 MEDIUM

CVE-2023-24505: Milesight NCR/Camera CWE-200: Exposure of Sensitive Information

Vendor Milesight
Product NCR/Camera
Weakness CWE-200 · Info exposure
Published May 8, 2023
Last update January 29, 2025
View on NVD All CVEs

CVSS base score

5.3/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality Low
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

What the vulnerability does

01Description

Milesight NCR/camera version 71.8.0.6-r5 discloses sensitive information through an unspecified request.

Key dates

02Disclosure timeline

May 8, 2023 CVE published
January 29, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2024-42508 CVE-2025-54468 Rancher sends sensitive information to external services through the `/meta/proxy` endpoint CVE-2026-42220 nginx-ui: Authenticated settings disclosure exposes node.secret and enables trusted-node authentication abuse, backup exfiltration, and restore-based nginx-ui state rollback CVE-2017-12163 CVE-2024-8978 Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders <= 6.0.9 - Authenticated (Contributor+) Sensitive Information Exposure