Skip to content
OpenAdvisories
Critical · 10.0 CVE-2023-41917 EUVD-2023-46394GHSA-fjgg-2fpm-4923

Improper input validation in Kiloview P1/P2 devices allows for remote code execution

Published Jul 2, 2024 · Updated Aug 2, 2024 · Assigned by NCSC-NL

Description

Inadequate input validation exposes the system to potential remote code execution (RCE) risks. Attackers can exploit this vulnerability by appending shell commands to the Speed-Measurement feature, enabling unauthorized code execution.

Affected products

VendorProductAffectedFixed
Kiloview P1/P2 All – ≤ 4.8.2605 —

Advisories 1

References