CVE-2023-41918: Missing Authentication for Critical Function in Kiloview P1/P2 devices

Severity: critical (CVSS 10.0 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-07-02 · updated 2026-06-17
Weakness: CWE-306

Description

A vulnerability allows unauthorized access to functionality inadequately constrained by ACLs. Attackers may exploit this to unauthenticated execute commands potentially leading to unauthorized data manipulation, access to privileged functions, or even the execution of arbitrary code.

Affected products

Kiloview P1 4G Video Encoder Firmware: all versions
Kiloview P2 4G Video Encoder Firmware: all versions

References

https://advisories.ncsc.nl/advisory?id=NCSC-2024-0273
https://advisories.ncsc.nl/advisory?id=NCSC-2024-0273

Get alerted when CVE-2023-41918 or the next vulnerability affects your stack