Skip to content
OpenAdvisories
High · 8.8 CVE-2024-2162 EUVD-2024-27126GHSA-jcrx-c647-92vh

Authenticated Remote Code Execution in Kiloview NDI N series products

Published Mar 21, 2024 · Updated Aug 27, 2024 · Assigned by NCSC.ch

Description

An OS Command Injection vulnerability in Kiloview NDI allows a low-privileged user to execute arbitrary code remotely on the device with high privileges.

This issue affects Kiloview NDI N3, N3-s, N4, N20, N30, N40 and was fixed in Firmware version 2.02.0227 .

Affected products

VendorProductAffectedFixed
Kiloview NDI — N3 Firmware 2.02.0227

References