CVE-2023-41918

Missing Authentication for Critical Function in Kiloview P1/P2 devices

State: Published
Severity: 10.0 Critical
Published: Jul 2, 2024
Updated: Aug 2, 2024
Reserved: Sep 5, 2023

Description

A vulnerability allows unauthorized access to functionality inadequately constrained by ACLs. Attackers may exploit this to unauthenticated execute commands potentially leading to unauthorized data manipulation, access to privileged functions, or even the execution of arbitrary code.

Scores

CVSS	Score	Vector	Source
3.1	10.0 Critical	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H	NCSC-NL

Weaknesses

CWE-306 Missing Authentication for Critical Function

Affected Products

Product	Versions
P1/P2Kiloview	All through 4.8.2605Affected

References

https://advisories.ncsc.nl/advisory?id=NCSC-2024-0273

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.