7.3
High
CVE-2024-3506 A possible buffer overflow in selected cameras' drivers from XProtect Device Pack can allow an attacker with access to…
Description
A possible buffer overflow in selected cameras' drivers from XProtect Device Pack can allow an attacker with access to internal network to execute commands on Recording Server under strict conditions.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| XProtect VMS 13.1 | earliest → 13.1a | No fix stated |
| xprotect_vms 13.1 | earliest → 13.1a | No fix stated |
Other CVEs of XProtect VMS
The 4 CVEs of XProtect VMS →
CVE-2025-0836
Missing Authorization vulnerability in Milestone Systems XProtect VMS allows users with read-only access to Management…
5.3
Medium
CVE-2025-1688
Milestone Systems has discovered a security vulnerability in Milestone XProtect installer that resets system…
5.5
Medium
CVE-2024-12569
Disclosure of sensitive information in a Milestone XProtect Device Pack driver’s log file for third-party cameras,…
5.2
Medium