Vulnerability CVE-2023-22844


Published: 2023-07-06

Description:
An authentication bypass vulnerability exists in the requestHandlers.js verifyToken functionality of Milesight VPN v2.0.2. A specially-crafted network request can lead to authentication bypass. An attacker can send a network request to trigger this vulnerability.

Type:

CWE-321

(Use of Hard-coded Cryptographic Key)

 References:
https://talosintelligence.com/vulnerability_reports/TALOS-2023-1700

Copyright 2026, cxsecurity.com

 

Back to Top