Back to overview

CVE-2026-32644

CRITICAL
9.8
CVSS 3.1
Description
Specific firmware versions of Milesight AIOT cameras use SSL certificates with default private keys.

Metadata

CVE ID
CVE-2026-32644
State
PUBLISHED
Assigner
icscert
Reserved
2026-03-12 17:51 UTC
Published
2026-04-27 23:40 UTC
Last updated
2026-04-28 14:45 UTC
Primary CWE
CWE-321
CWE-321
Vendor / Product
Milesight / MS-Cxx63-PD
Sources
cve.org  ·  NVD

Severity & Metrics

9.8 CRITICAL CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
SSVC — CISA Coordinator
Exploitation
none
Automatable
yes
Tech. Impact
total
Affected products (82)
VendorProductPlatformVersions
Milesight MS-C2964-RFLPC — 0 ≤ T_45.8.0.3-r9
Milesight MS-C2966-RFLWPC — 0 ≤ T_45.8.0.3-r9
Milesight MS-C2966-X12RLPC — 0 ≤ T_45.8.0.3-r9
Milesight MS-C2966-X12RLVPC — 0 ≤ T_45.8.0.3-r9
Milesight MS-C2972-RFLPC — 0 ≤ T_45.8.0.3-r9
Milesight MS-C5321-FPE — 0 ≤ 62.8.0.4-r5
Milesight MS-C5361-X12LPC — 0 ≤ T_45.8.0.3-r9
Milesight MS-C5366-X12LPC — 0 ≤ T_45.8.0.3-r9
Milesight MS-C5366-X12LVPC — 0 ≤ T_45.8.0.3-r9
Milesight MS-C8477-HPG1 — 0 ≤ 63.8.0.4-r3
Milesight MS-C8477-PC — 0 ≤ 48.8.0.4-r3
Milesight MS-CQxx31-xxxG1 — 0 ≤ CQ_63.8.0.5-r1
Milesight MS-CQxx68-xxxG1 — 0 ≤ CQ_63.8.0.5-r1
Milesight MS-CQxx72-xxxG1 — 0 ≤ CQ_63.8.0.5-r1
Milesight MS-Cxx41-xxxPE — 0 ≤ 61.8.0.5-r2
Milesight MS-Cxx52-xxxPE — 0 ≤ 61.8.0.5-r2
Milesight MS-Cxx61-xxxPE — 0 ≤ 61.8.0.5-r2
Milesight MS-Cxx62-xxxG1 — 0 ≤ 63.8.0.5-r3
Milesight MS-Cxx62-xxxPE — 0 ≤ 61.8.0.5-r2
Milesight MS-Cxx63-PD — 0 ≤ 51.7.0.77-r12
Milesight MS-Cxx64-xPD — 0 ≤ 51.7.0.77-r12
Milesight MS-Cxx65-PE — 0 ≤ 61.8.0.5-r2
Milesight MS-Cxx66-FIPKG1 — 0 ≤ 63.8.0.4-r1-NX
Milesight MS-Cxx66-RFIPKG1 — 0 ≤ 63.8.0.4-r1-NX
Milesight MS-Cxx66-xxxG1 — 0 ≤ 63.8.0.5-r3
Milesight MS-Cxx66-xxxGPE — 0 ≤ 61.8.0.5-r2
Milesight MS-Cxx66-xxxPE — 0 ≤ 61.8.0.5-r2
Milesight MS-Cxx66-xxxxGOPC — 0 ≤ 45.8.0.2-AIoT-r4
Milesight MS-Cxx67-xxxPE — 0 ≤ 61.8.0.5-r2
Milesight MS-Cxx71-xxxPE — 0 ≤ 61.8.0.5-r2
Milesight MS-Cxx72-FIPKG1 — 0 ≤ 63.8.0.4-r1-NX
Milesight MS-Cxx72-RFIPKG1 — 0 ≤ 63.8.0.4-r1-NX
Milesight MS-Cxx72-xxxG1 — 0 ≤ 63.8.0.5-r3
Milesight MS-Cxx72-xxxPE — 0 ≤ 61.8.0.5-r2
Milesight MS-Cxx73-xPD — 0 ≤ 51.7.0.77-r12
Milesight MS-Cxx74-PA — 0 ≤ 3x.8.0.3-r11
Milesight MS-Cxx75-xxPD — 0 ≤ 51.7.0.77-r12
Milesight MS-Cxx76-PE — 0 ≤ 61.8.0.5-r2
Milesight MS-Cxx83-xPD — 0 ≤ 51.7.0.77-r12
Milesight MS-Nxxxx-NxE — 0 ≤ 7x.9.0.19-r5
Milesight MS-Nxxxx-xxC — 0 ≤ 7x.9.0.19-r5
Milesight MS-Nxxxx-xxE — 0 ≤ 7x.9.0.19-r5
Milesight MS-Nxxxx-xxG — 0 ≤ 7x.9.0.19-r5
Milesight MS-Nxxxx-xxH — 0 ≤ 7x.9.0.19-r5
Milesight MS-Nxxxx-xxT — 0 ≤ 7x.9.0.19-r5
Milesight PM3322-E — 0 ≤ PI_61.8.0.3_LPR-r3
Milesight PMC8266-FGPE — 0 ≤ PO_61.8.0.4_LPR
Milesight PMC8266-FPE — 0 ≤ PO_61.8.0.4_LPR
Milesight SC211 — 0 ≤ C_21.1.0.8-r4
Milesight SP111 — 0 ≤ 52.8.0.4-r5
Milesight TS2841-X36TPC — 0 ≤ T_45.8.0.3-r9
Milesight TS2841-X36TPC/W — 0 ≤ T_45.8.0.3-r9
Milesight TS2866-X4TGPC — 0 ≤ T_45.8.0.3-r9
Milesight TS2866-X4TPC — 0 ≤ T_45.8.0.3-r9
Milesight TS2866-X4TVPC — 0 ≤ T_45.8.0.3-r9
Milesight TS2867-X5TPC — 0 ≤ T_45.8.0.3-r9
Milesight TS2961-X12TPC — 0 ≤ T_45.8.0.3-r9
Milesight TS2966-X12TPE — 0 ≤ T_61.8.0.4_LPR-r3
Milesight TS2966-X12TVPE — 0 ≤ T_61.8.0.4_LPR-r3
Milesight TS4441-X36RE — 0 ≤ T_61.8.0.4_LPR-r3
Milesight TS4441-X36RPE — 0 ≤ T_61.8.0.4_LPR-r3
Milesight TS4466-RFIVPG1 — 0 ≤ T_63.8.0.4_LPR-r3
Milesight TS4466-X4RIPG1 — 0 ≤ T_63.8.0.4_LPR-r3
Milesight TS4466-X4RIVPG1 — 0 ≤ T_63.8.0.4_LPR-r3
Milesight TS4466-X4RIWG1 — 0 ≤ T_63.8.0.4_LPR-r3
Milesight TS4466-X4RPE — 0 ≤ T_61.8.0.4_LPR-r3
Milesight TS4466-X4RVPE — 0 ≤ T_61.8.0.4_LPR-r3
Milesight TS4466-X4RWE — 0 ≤ T_61.8.0.4_LPR-r3
Milesight TS5366-X12PE — 0 ≤ T_61.8.0.4_LPR-r3
Milesight TS5366-X12RIPG1 — 0 ≤ T_63.8.0.4_LPR-r3
Milesight TS5366-X12VPE — 0 ≤ T_61.8.0.4_LPR-r3
Milesight TS5510-GH — 0 ≤ T_47.8.0.4_LPR-r6
Milesight TS5510-GVH — 0 ≤ T_47.8.0.4_LPR-r7
Milesight TS5511-GVH — 0 ≤ T_47.8.0.4_LPR-r6
Milesight TS8266-FPC/P — 0 ≤ T_45.8.0.3-r9
Milesight TS8266-RFIVPG1 — 0 ≤ T_63.8.0.4_LPR-r3
Milesight TS8266-X4PE — 0 ≤ T_61.8.0.4_LPR-r3
Milesight TS8266-X4RIPG1 — 0 ≤ T_63.8.0.4_LPR-r3
Milesight TS8266-X4RIVPG1 — 0 ≤ T_63.8.0.4_LPR-r3
Milesight TS8266-X4RIWG1 — 0 ≤ T_63.8.0.4_LPR-r3
Milesight TS8266-X4VPE — 0 ≤ T_61.8.0.4_LPR-r3
Milesight TS8266-X4WE — 0 ≤ T_61.8.0.4_LPR-r3
Weakness (CWE)
CWESourceDescription
CWE-321 cna CWE-321
CVSS scores (2)
ScoreSeverityVersionSourceVector
9.8 CRITICAL 3.1 cna CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.2 CRITICAL 4.0 cna CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
References (3)
Back to overview