CVE-2024-2161: falha crítica em Kiloview NDI
Use of Hard-coded Credentials in Kiloview NDI N series products API middleware
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
28Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 9.8epss 0.9%
Use of Hard-coded Credentials in Kiloview NDI allows un-authenticated users to bypass authenticationThis issue affects Kiloview NDI N3, N3-s, N4, N20, N30, N40 and was fixed in Firmware version 2.02.0227 .
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
Kiloview · NDICVEs relacionadas — Kiloview NDI
No mesmo produto, das mais perigosas para as menos.
Referências
https://www.kiloview.com/en/support/download/1779/https://www.kiloview.com/en/support/download/n20-firmware-download/https://www.kiloview.com/en/support/download/n30-for-ndi/https://www.kiloview.com/en/support/download/n3-for-ndi/https://www.kiloview.com/en/support/download/n3-s-firmware-download/https://www.kiloview.com/en/support/download/n40/