Cyber Resilience

CVE-2024-36391

Milesight Devicehub 3.0.1-r1

Published
02 June 2024
Modified
04 March 2025
CVSS Score v3.1 9.1
Click a component to see what it means
Raw vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
EPSS Score 0.0035 28th percentile
Risk Priority 66 floored blend · peak EPSS

Summary

CVE-2024-36391 is a critical-severity an unspecified weakness vulnerability in Milesight Devicehub. Its CVSS base score is 9.1 (Critical).

Operationally, ranked at the 28th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

OWASP Top 10 for Web (2025)

A04:2025 Cryptographic Failures

EU & UK References

Vulnerability Data

MileSight DeviceHub - CWE-320: Key Management Errors may allow Authentication Bypass and Man-In-The-Middle Traffic

CWE(s)
CWE-320NVD-CWE-noinfo

Related Threats

CVEs Like This One

CVE-2024-36388Same product: Canonical Ubuntu Linux
CVE-2024-36389Same product: Canonical Ubuntu Linux
CVE-2024-36390Same product: Canonical Ubuntu Linux
CVE-2024-36392Same product: Canonical Ubuntu Linux
CVE-2024-27776Same product: Canonical Ubuntu Linux
CVE-2026-47330Same product: Canonical Ubuntu Linux
CVE-2021-3493Same product: Canonical Ubuntu Linux
CVE-2026-47333Same product: Canonical Ubuntu Linux
CVE-2023-2640Same product: Canonical Ubuntu Linux
CVE-2023-2612Same product: Canonical Ubuntu Linux

Affected Assets

milesight
devicehub
3.0.1-r1

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References