Milesight

Milesight develops a moderately broad portfolio of networked IoT and security devices, including industrial routers, network cameras, and device management platforms deployed across surveillance and remote-access infrastructure. Vulnerabilities affecting the vendor skew toward serious outcomes, with an elevated share reaching critical severity, reflecting memory-safety and command-injection risks in embedded and network-facing firmware. The exposure recurs across product lines such as the UR32L industrial router and IP security cameras and centers on weakness classes including out-of-bounds writes, stack-based buffer overflows, and OS and command-injection flaws that are characteristic of C-based embedded codebases. Defenders should prioritize inventory and network segmentation of internet-exposed Milesight devices and treat firmware updates for routers and cameras as high-value patches given the direct access and lateral-movement risk these products present. Current exploitation activity and severity counts are shown alongside this summary.