Milesight firmware versions use hard-coded SSL private keys. This weakness could allow an attacker to intercept or forge traffic, potentially accessing video streams or sensitive data. The vulnerability is identified with CVSS 9.2.

All Milesight AIOT camera models listed in the CNA vendor list are affected, including models such as MS-C2964, MS-C2966, and TS-8266. Each product requires the firmware updates specified by the vendor to replace the default key with a secure, individualized certificate.

The CVSS score of 9.2 marks this flaw as critical, yet the EPSS score of <1% indicates a very low but nonzero probability of exploitation. Attackers could leverage the exposed default key by performing a man‑in‑the‑middle or impersonation attack over the HTTPS channel used by the devices. The vulnerability is not listed in the CISA KEV catalog.