PT-2024-18973 · Kiloview · Kiloview Ndi
CVE-2024-2162
·
Published
2024-03-21
·
Updated
2024-03-22
CVSS v3.1
8.8
High
| Vector | AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Kiloview NDI versions prior to 2.02.0227
Description
An OS Command Injection issue allows a low-privileged user to execute arbitrary code remotely on the device with high privileges. This issue affects various Kiloview NDI models, including N3, N3-s, N4, N20, N30, N40.
Recommendations
For versions prior to 2.02.0227, update to Firmware version 2.02.0227 to resolve the issue. As a temporary workaround, consider restricting access to the device to minimize the risk of exploitation.
Fix
OS Command Injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Kiloview Ndi