CVE-2023-41917: Improper input validation in Kiloview P1/P2 devices allows for remote code execution

Severity: critical (CVSS 10.0 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-07-02 · updated 2026-06-17
Weakness: CWE-20

Description

Inadequate input validation exposes the system to potential remote code execution (RCE) risks. Attackers can exploit this vulnerability by appending shell commands to the Speed-Measurement feature, enabling unauthorized code execution.

Affected products

Kiloview P1 4G Video Encoder Firmware: all versions
Kiloview P2 4G Video Encoder Firmware: all versions

References

https://advisories.ncsc.nl/advisory?id=NCSC-2024-0273
https://advisories.ncsc.nl/advisory?id=NCSC-2024-0273

Get alerted when CVE-2023-41917 or the next vulnerability affects your stack