Lucene search
+L

28 matches found

Cvelist
Cvelist
•added 2024/03/21 6:00 a.m.•29 views

CVE-2024-2162 Authenticated Remote Code Execution in Kiloview NDI N series products

An OS Command Injection vulnerability in Kiloview NDI allows a low-privileged user to execute arbitrary code remotely on the device with high privileges. This issue affects Kiloview NDI N3, N3-s, N4, N20, N30, N40 and was fixed in Firmware version 2.02.0227...

8.8CVSS9.2AI score0.0213EPSS
SaveExploits0References6
CVE
CVE
•added 2024/03/21 6:00 a.m.•82 views

CVE-2024-2162

CVE-2024-2162 is an OS command injection vulnerability in Kiloview NDI devices (N3, N3-s, N4, N20, N30, N40). The issue allows a low-privileged user to remotely execute arbitrary code with high privileges. Root cause is an OS command injection path exploitable over network. Affected firmware vers...

8.8CVSS9.1AI score0.0213EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2024/03/21 6:00 a.m.•16 views

CVE-2024-2161 Use of Hard-coded Credentials in Kiloview NDI N series products API middleware

Use of Hard-coded Credentials in Kiloview NDI allows un-authenticated users to bypass authenticationThis issue affects Kiloview NDI N3, N3-s, N4, N20, N30, N40 and was fixed in Firmware version 2.02.0227...

9.8CVSS7AI score0.00906EPSS
SaveExploits0References6
CVE
CVE
•added 2024/03/21 6:00 a.m.•66 views

CVE-2024-2161

The CVE-2024-2161 issue affects Kiloview NDI products including N3, N3-s, N4, N20, N30, and N40. The root cause is hard-coded credentials in the Kiloview NDI API middleware, allowing unauthenticated users to bypass authentication. Exploitation details are not provided in the documents; no in-the-...

9.8CVSS9.6AI score0.00906EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/21 12:00 a.m.•7 views

CVE-2024-2162: Improper Neutralization of Special Elements used in an OS Command

An OS Command Injection vulnerability in Kiloview NDI allows a low-privileged user to execute arbitrary code remotely on the device with high privileges. This issue affects Kiloview NDI N3, N3-s, N4, N20, N30, N40 and was fixed in Firmware version 2.02.0227...

8.8CVSS6.5AI score0.0213EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/03/21 12:00 a.m.•15 views

Kiloview NDI多个产品 安全漏洞

Kiloview NDI N4 and Kiloview NDI N3 are both products of Kiloview, China.Kiloview NDI N4 is a multi-channel NDI video encoder.Kiloview NDI N3 is a compact NDI video encoder. A security vulnerability exists in multiple Kiloview NDI products that stems from the presence of an operating system comma...

8.8CVSS8.1AI score0.0213EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/21 12:00 a.m.•5 views

CVE-2024-2161: Use of Hard-coded Credentials

Use of Hard-coded Credentials in Kiloview NDI allows un-authenticated users to bypass authenticationThis issue affects Kiloview NDI N3, N3-s, N4, N20, N30, N40 and was fixed in Firmware version 2.02.0227...

9.8CVSS5.8AI score0.00906EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/03/21 12:00 a.m.•13 views

Kiloview NDI多个产品安全漏洞

Kiloview NDI N4 and Kiloview NDI N3 are both products of China-based Kiloview.Kiloview NDI N4 is a multi-channel NDI video encoder.Kiloview NDI N3 is a compact NDI video encoder. A security vulnerability exists in multiple Kiloview NDI products that stems from the use of hard-coded credentials th...

9.8CVSS6.8AI score0.00906EPSS
SaveExploits0References7
Rows per page
Query Builder