CVE-2023-41921: Download of Code Without Integrity Check in Kiloview P1/P2 devices

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-07-02 · updated 2026-06-17
Weakness: CWE-494

Description

A vulnerability allows attackers to download source code or an executable from a remote location and execute the code without sufficiently verifying the origin and integrity of the code. This vulnerability can allow attackers to modify the firmware before uploading it to the system, thus achieving the modification of the target’s integrity to achieve an insecure state.

Affected products

Kiloview P1 4G Video Encoder Firmware: all versions
Kiloview P2 4G Video Encoder Firmware: all versions

References

https://advisories.ncsc.nl/advisory?id=NCSC-2024-0273
https://advisories.ncsc.nl/advisory?id=NCSC-2024-0273

Get alerted when CVE-2023-41921 or the next vulnerability affects your stack