To learn more about recent vulnerabilities and their mitigation please refer to our articles on cyber security
Article Topic Affected Products Date Published Full Article
1 Remote Code Execution in XProtect Management Server XProtect Management Server for versions 2020 R2 (20.2) - 2023 R1 (23.1) May 9, 2023 Read more
2 Remote Code Execution in XProtect Event Server XProtect Event Server for versions 2020 R2 (20.2) - 2023 R1 (23.1) May 9, 2023 Read more
3 Milestone Mobile Server authentication bypass vulnerability XProtect Mobile Server 2022 R2, XProtect Mobile Server 2022 R3 October 21 2022 Read more
4 Missing encryption between Identity Server and SQL server XProtect VMS 2022 R1 June 9 2022 Read more
5 Information about Spring4Shell (CVE-2022-22965) - April 4 2022 Read more
6 Important update to the XProtect VMS Products Administrator manual — Management Server permissions - March 24 2022 Read more
7 Log4J vulnerability (FAQ) - February 21 2022 Read more
8 Arbitrary file access on the DLNA Server XProtect DLNA Server 2019 R1 – 2021 R1 November 9 2021 Read more
9 Milestone Open Network Bridge (ONVIF) security vulnerability Supported versions of XProtect Open Network Bridge (2018 R2 - 2020 R3) April 13 2021 Read more
10 XProtect Smart Client - username on HTTP port 80 XProtect Smart Client 2020 R2 (20.2a) or older August 10 2020 Read more
11 Customer Dashboard discontinues support for legacy SSL/TLS protocols XProtect Corporate, Expert, Enterprise, Professional, Express, Essential, Go, 2016. Milestone Husky M10 (Arcus 1.0), M30 S, M50 S, M50 Advanced, M500 Advanced 2016 July 10 2020 Read more
12 XProtect Smart Client execution vulnerability XProtect Smart Client October 11 2019 Read More
13 XProtect Configuration API security vulnerability and mitigation XProtect Corporate, Expert, Professional+, Express+, Essential+ versions 2016 R1 (10.0a) - 2019 R1 (13.1a) March 22 2019 Read More
14 .NET Framework Remoting Potential Security Vulnerability XProtect Corporate, Expert, Professional+, Express+, Essential+ April 25 2018 Read More
15 Unsupported MSXML version in XProtect VMS All Jan 16 2018 Read more
16 Meltdown and Spectre attacks All operating systems Jan 5 2018 Read more
17 CCleaner 5.33 Malware Windows operating system Sep 20 2017 Read more
18 How to identify and remove default XProtect Basic User account XProtect® Express 2017 R1 (11.1a) and prior versions, XProtect® Essential 2.0 2017 R1 Aug 29 2017 Read more
19 Husky M10 privilege escalation issue Milestone Husky M10 Aug 21 2017 Read more
20 ONVIF potential security vulnerability Genivia gSOAP Toolkit versions 2.7 to 2.8.47 Jul 7 2017 Read more
You will be logged out in
5 minutes and 0 seconds
For your security, sessions automatically end after 15 minutes of inactivity unless you choose to stay logged in.