Skip to content
OpenAdvisories
Critical · 10.0 CVE-2025-9265 EUVD-2025-34057GHSA-cvx8-x87w-7x8c

API Authentication Bypass via Header Spoofing vulnerability in Kiloview NDI N30 Products

Published Oct 13, 2025 · Updated Oct 14, 2025 · Assigned by NCSC.ch

Description

A broken authorization vulnerability in Kiloview NDI N30 allows a remote unauthenticated attacker to deactivate user verification, giving them access to state changing actions that should only be initiated by administratorsThis issue affects

Kiloview NDI N30

and was fixed in Firmware version later than 2.02.0246

Affected products

VendorProductAffectedFixed
Kiloview NDI 2.02.246 —

References