Description
An admin user can gain unauthorized write access to the /etc/rc.local file on the device, which is executed on a system boot.
Published: 2025-05-07
Score: 6.1 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

Vendor Solution

Milesight released the latest firmware Version 60.0.0.46 for the UG65 gateway. Users can download the latest firmware from the Milesight download center. https://www.milesight.com/iot/resources/download-center/#firmware-ug65 Please contact Milesight technical support https://www.milesight.com/company/contactus for more information about this issue and for instructions for installing the latest firmware.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2025-13931 An admin user can gain unauthorized write access to the /etc/rc.local file on the device, which is executed on a system boot.
History

Mon, 14 Jul 2025 13:45:00 +0000

Type Values Removed Values Added
Metrics epss

{'score': 0.00038}

 epss

{'score': 0.0004}

Mon, 23 Jun 2025 15:30:00 +0000

Type Values Removed Values Added
First Time appeared Milesight
Milesight ug65-868m-ea
Milesight ug65-868m-ea Firmware
CPEs cpe:2.3:h:milesight:ug65-868m-ea:-:*:*:*:*:*:*:*
cpe:2.3:o:milesight:ug65-868m-ea_firmware:*:*:*:*:*:*:*:*
Vendors & Products Milesight
Milesight ug65-868m-ea
Milesight ug65-868m-ea Firmware

Thu, 08 May 2025 15:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Wed, 07 May 2025 20:30:00 +0000

Type Values Removed Values Added
Description An admin user can gain unauthorized write access to the /etc/rc.local file on the device, which is executed on a system boot.
Title Milesight UG65-868M-EA Improper Access Control for Volatile Memory Containing Boot Code
Weaknesses CWE-1274
References
Metrics cvssV3_1

{'score': 6.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N'}

cvssV4_0

{'score': 6.1, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N'}

Subscriptions

Milesight Ug65-868m-ea Ug65-868m-ea Firmware
cve-icon MITRE

Status: PUBLISHED

Assigner: icscert

Published:

Updated: 2025-05-08T15:12:07.048Z

Reserved: 2025-04-28T16:04:15.727Z

Link: CVE-2025-4043

cve-icon Vulnrichment

Updated: 2025-05-08T15:11:43.951Z

cve-icon NVD

Status : Analyzed

Published: 2025-05-07T21:16:04.643

Modified: 2025-06-23T15:02:15.940

Link: CVE-2025-4043

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses