What is CVE-2023-41918?

CVE-2023-41918 is a critical-severity vulnerability in Kiloview P1/p2, classified under Missing Authentication for Critical Function. CVSS score: 10.0/10. Published 2024-07-02.

How severe is CVE-2023-41918?

Critical severity. CVSS v3 base score is 10.0 out of 10.

Auth bypass in Kiloview P1/p2

CVE-2023-41918

A vulnerability allows unauthorized access to functionality inadequately constrained by ACLs. Attackers may exploit this to unauthenticated execute commands potentially leading to unauthorized data manipulation, access to privileged functions, or even the execution of arbitrary code.

Vulnerability class: Broken Authentication

EPSS: 0.006 (43.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 10.0 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H.

Affected products

Kiloview P1/p2 — versions All

Weakness classification (CWE)

CWE-306 — Missing Authentication for Critical Function

References

cert@ncsc.nl

Frequently asked questions

What is CVE-2023-41918?: CVE-2023-41918 is a critical-severity vulnerability in Kiloview P1/p2, classified under Missing Authentication for Critical Function. CVSS score: 10.0/10. Published 2024-07-02.
How severe is CVE-2023-41918?: Critical severity. CVSS v3 base score is 10.0 out of 10.