CVE-2024-2161
Use of Hard-coded Credentials in Kiloview NDI N series products API middleware
Severity Score
9.8
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
Attend
*SSVC
Descriptions
Use of Hard-coded Credentials in Kiloview NDI allows un-authenticated users to bypass authenticationThis issue affects Kiloview NDI N3, N3-s, N4, N20, N30, N40 and was fixed in Firmware version 2.02.0227 .
El uso de credenciales codificadas en Kiloview NDI permite a los usuarios no autenticados omitir la autenticación. Este problema afecta a Kiloview NDI N3, N3-s, N4, N20, N30, N40 y se solucionó en la versión de firmware 2.02.0227.
Use of Hard-coded Credentials in Kiloview NDI allows un-authenticated users to bypass authenticationThis issue affects Kiloview NDI N3, N3-s, N4, N20, N30, N40 and was fixed in Firmware version 2.02.0227 .
*Credits:
Milan Duric, EBU
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:Attend
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2024-03-04 CVE Reserved
- 2024-03-21 CVE Published
- 2024-03-21 EPSS Updated
- 2024-08-02 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-798: Use of Hard-coded Credentials
CAPEC
- CAPEC-115: Authentication Bypass
References (6)
| URL | Tag | Source |
|---|---|---|
| https://www.kiloview.com/en/support/download/1779 | Release Notes | |
| https://www.kiloview.com/en/support/download/n20-firmware-download | Release Notes | |
| https://www.kiloview.com/en/support/download/n3-for-ndi | Release Notes | |
| https://www.kiloview.com/en/support/download/n3-s-firmware-download | Release Notes | |
| https://www.kiloview.com/en/support/download/n30-for-ndi | Release Notes | |
| https://www.kiloview.com/en/support/download/n40 | Release Notes |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Kiloview Search vendor "Kiloview" | Ndi N20 Firmware Search vendor "Kiloview" for product "Ndi N20 Firmware" | * | - |
Affected
| ||||||
| Kiloview Search vendor "Kiloview" | Ndi N3-s Firmware Search vendor "Kiloview" for product "Ndi N3-s Firmware" | * | - |
Affected
| ||||||
| Kiloview Search vendor "Kiloview" | Ndi N30 Firmware Search vendor "Kiloview" for product "Ndi N30 Firmware" | * | - |
Affected
| ||||||
| Kiloview Search vendor "Kiloview" | Ndi N3 Firmware Search vendor "Kiloview" for product "Ndi N3 Firmware" | * | - |
Affected
| ||||||
| Kiloview Search vendor "Kiloview" | Ndi N40 Firmware Search vendor "Kiloview" for product "Ndi N40 Firmware" | * | - |
Affected
| ||||||
| Kiloview Search vendor "Kiloview" | Ndi N4 Firmware Search vendor "Kiloview" for product "Ndi N4 Firmware" | * | - |
Affected
| ||||||