by Kastro
Paper/Archive/CVE-2023-41918

CVE-2023-41918

Kiloview P1/P2 — Missing Authentication for Critical Function in Kiloview P1/P2 devices

EPSS 0.6%CVSS 10.0
critical.is priorityof 100
40
CVSS 10.0 (CNA)10.0 / 10 × 3030.0Not in CISA KEV+300.0EPSS percentile 47.3.473 × 209.5No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

A vulnerability allows unauthorized access to functionality inadequately constrained by ACLs. Attackers may exploit this to unauthenticated execute commands potentially leading to unauthorized data manipulation, access to privileged functions, or even the execution of arbitrary code.

Affected

ProductAffectedFixed inSource
P1/P2All – 4.8.2605–CNA
p1_4g_video_encoder_firmware≤ *–CISA-ADP
p2_4g_video_encoder_firmware≤ *–CISA-ADP

Scores by source

NCSC-NL (CNA)10.0CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refadvisories.ncsc.nl/advisory?id=NCSC-2024-0273