What’s Vulnerable › Vulnerabilities

CVE-2023-41926: Insufficiently protected credentials in Kiloview P1/P2 devices

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-07-02 · updated 2026-06-17
• Weakness: CWE-522

Description

The webserver utilizes basic authentication for its user login to the configuration interface. As encryption is disabled on port 80, it enables potential eavesdropping on user traffic, making it possible to intercept their credentials.

Affected products

• Kiloview P1 4G Video Encoder Firmware: all versions
• Kiloview P2 4G Video Encoder Firmware: all versions

References

• https://advisories.ncsc.nl/advisory?id=NCSC-2024-0273
• https://advisories.ncsc.nl/advisory?id=NCSC-2024-0273

Get alerted when CVE-2023-41926 or the next vulnerability affects your stack