Skip to content
OpenAdvisories
Critical · 10.0 CVE-2023-41918 EUVD-2023-46395GHSA-6mmq-wfvf-jxf6

Missing Authentication for Critical Function in Kiloview P1/P2 devices

Published Jul 2, 2024 · Updated Aug 2, 2024 · Assigned by NCSC-NL

Description

A vulnerability allows unauthorized access to functionality inadequately constrained by ACLs. Attackers may exploit this to unauthenticated execute commands potentially leading to unauthorized data manipulation, access to privileged functions, or even the execution of arbitrary code.

Affected products

VendorProductAffectedFixed
Kiloview P1/P2 All – ≤ 4.8.2605 —

Advisories 1

References