PT-2025-41764

CVE-2025-9265

Published

2025-10-13

Updated

2025-10-13

Description by

CVSS 4.0

Critical

MetricsAV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions Kiloview NDI N30 versions prior to 2.02.0246

Description A broken authorization allows a remote, unauthenticated attacker to disable user verification, granting access to administrative actions. This impacts Kiloview NDI N30.

Recommendations Update to Firmware version 2.02.0246 or later.

Exploitability

Fix

Impacts

Researchers

Louis Dumas

Vendors

Affected products

Weakness enumeration

CWE-287: Improper Authentication

CWE-290: Authentication Bypass by Spoofing

CWE-346: Origin Validation Error