Kiloview
16 CVEs across 19 Kiloview products. Browse Kiloview vulnerabilities, severities, and proof-of-concept exploits.
Kiloview products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-1453 | Critical | 9.8 | 2026-01-29 | A missing authentication for critical function vulnerability in KiloView Encoder Series could allow an unauthenticated attacker to create or delete administrat… |
CVE-2025-63560 | High | 7.5 | 2025-11-06 | An issue in KiloView Dual Channel 4k HDMI & 3G-SDI HEVC Video Encoder Firmware v.1.20.0006 allows a remote attacker to cause a denial of service via the system… |
CVE-2025-9265 | | 2025-10-13 | A broken authorization vulnerability in Kiloview NDI N30 allows a remote unauthenticated attacker to deactivate user verification, giving them access to state… | |
CVE-2025-8915 | | 2025-10-13 | Hardcoded TLS private key and certificate in firmware in Kiloview N30 2.02.246 allows malicious adversary to do a Mann-in-the-middle attack via the network | |
CVE-2023-41928 | Medium | 5.3 | 2024-07-02 | The device is observed to accept deprecated TLS protocols, increasing the risk of cryptographic weaknesses. |
CVE-2023-41927 | Medium | 5.3 | 2024-07-02 | The server supports at least one cipher suite which is on the NCSC-NL list of cipher suites to be phased out, increasing the risk of cryptographic weaknesses. |
CVE-2023-41926 | High | 8.8 | 2024-07-02 | The webserver utilizes basic authentication for its user login to the configuration interface. As encryption is disabled on port 80, it enables potential eaves… |
CVE-2023-41923 | High | 7.2 | 2024-07-02 | The user management section of the web application permits the creation of user accounts with excessively weak passwords, including single-character passwords. |
CVE-2023-41922 | High | 7.2 | 2024-07-02 | A 'Cross-site Scripting' (XSS) vulnerability, characterized by improper input neutralization during web page generation, has been discovered. This vulnerabilit… |
CVE-2023-41921 | Critical | 9.8 | 2024-07-02 | A vulnerability allows attackers to download source code or an executable from a remote location and execute the code without sufficiently verifying the origin… |
CVE-2023-41920 | Critical | 9.8 | 2024-07-02 | The vulnerability allows attackers access to the root account without having to authenticate. Specifically, if the device is configured with the IP address of… |
CVE-2023-41919 | Critical | 9.8 | 2024-07-02 | Hardcoded credentials are discovered within the application's source code, creating a potential security risk for unauthorized access. |
CVE-2023-41918 | Critical | 10.0 | 2024-07-02 | A vulnerability allows unauthorized access to functionality inadequately constrained by ACLs. Attackers may exploit this to unauthenticated execute commands po… |
CVE-2023-41917 | Critical | 10.0 | 2024-07-02 | Inadequate input validation exposes the system to potential remote code execution (RCE) risks. Attackers can exploit this vulnerability by appending shell comm… |
CVE-2024-2162 | High | 8.8 | 2024-03-21 | An OS Command Injection vulnerability in Kiloview NDI allows a low-privileged user to execute arbitrary code remotely on the device with high privileges. This… |
CVE-2024-2161 | Critical | 9.8 | 2024-03-21 | Use of Hard-coded Credentials in Kiloview NDI allows un-authenticated users to bypass authenticationThis issue affects Kiloview NDI N3, N3-s, N4, N20, N30, N40… |