5.2
Medium
CVE-2024-12569 Disclosure of sensitive information in a Milestone XProtect Device Pack driver’s log file for third-party cameras,…
Description
Disclosure of sensitive information in a Milestone XProtect Device Pack driver’s log file for third-party cameras, allows an attacker to read camera credentials stored in the Recording Server under specific conditions.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| XProtect VMS 13.5 | earliest → < 13.5a | 13.5a |
Other CVEs of XProtect VMS
The 4 CVEs of XProtect VMS →
CVE-2025-0836
Missing Authorization vulnerability in Milestone Systems XProtect VMS allows users with read-only access to Management…
5.3
Medium
CVE-2025-1688
Milestone Systems has discovered a security vulnerability in Milestone XProtect installer that resets system…
5.5
Medium
CVE-2024-3506
A possible buffer overflow in selected cameras' drivers from XProtect Device Pack can allow an attacker with access to…
7.3
High