KiloView Encoder Series (Update A)

Summary

Vulnerabilities 1

• Critical 9.8
  CVE-2026-1453

  Missing Authentication for Critical Function in KiloView Encoder Series

  A missing authentication for critical function vulnerability in KiloView Encoder Series could allow an unauthenticated attacker to create or delete administrator accounts. This vulnerability can grant the attacker full administrative control over the product.

  Kiloview Encoder Series P1 hardware Version 1.3.20 Encoder Series RE1 hardware Version 2.0.00 Encoder Series E1 hardware Version 1.6.20
  Jan 29, 2026

Revision history

1. 2026-02-05 #2

   Update A - Affected products are end-of-life

2. 2026-01-29 #1

   Initial Publication

References

• ICSA Advisory ICSA-26-029-01 - Web Version
  https://www.cisa.gov/news-events/ics-advisories/icsa-26-029-01
• Recommended Practices
  https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
• Recommended Practices
  https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
• Recommended Practices
  https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
• Recommended Practices
  https://www.cisa.gov/topics/industrial-control-systems
• Recommended Practices
  https://www.cisa.gov/uscert/sites/default/files/publications/emailscams0905.pdf
• Recommended Practices
  https://www.cisa.gov/uscert/ncas/tips/ST04-014
• Recommended Practices
  https://www.cisa.gov/news-events/ics-alerts/ics-alert-10-301-01
• Recommended Practices
  https://www.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
• Recommended Practices
  https://www.cisa.gov/news-events/news/targeted-cyber-intrusion-detection-and-mitigation-strategies-update-b
• Recommended Practices
  https://www.cisa.gov/secure-our-world/teach-employees-avoid-phishing
• Recommended Practices
  https://www.cisa.gov/news-events/news/avoiding-social-engineering-and-phishing-attacks