This vulnerability in Milesight MS-Cxx63-PD AIOT cameras arises from weak key generation in certain firmware versions, enabling bypass of authorization controls. Classified under CWE-639, it compromises the integrity of the authorization process. The CVSS 4.0 base score is 7.3, reflecting high severity with attack vector as adjacent network, high attack complexity, and partial privileges required. The vulnerability is published and assigned CVE-2026-28747 but lacks an official fix or patch at this time.

Successful exploitation of this vulnerability could allow an attacker to bypass authorization on affected Milesight AIOT cameras, potentially gaining unauthorized access or control. The high CVSS score indicates significant security impact, but no active exploitation has been reported. The vulnerability affects device security posture by weakening authentication mechanisms.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch is currently available, users should monitor vendor communications for updates. Until a patch is released, restrict network access to the affected devices and apply compensating controls to limit exposure.