Description
Authentication tokens issued by the E3's web management interface on login are given an expiration time far beyond any reasonable session lifetime, effectively making them non-expiring. A token obtained through interception or device compromise remains valid for authenticated access for an extended period.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Kiloview | E3 Firmware | < 1.30 | 1.30 |
Advisories 1
- ICSA-26-295-01 Kiloview E3 NDI Encoder CISA ICS & IT advisories · Oct 22, 2026