VULN/vuln-cve
1
0 Fork 0
Code Pull Requests Actions 1 Activity
Files
c1444140e59c61ba154436ea0cd6284d8a97c3f0
vuln-cve/data/2024/2xxx/CVE-2024-2161.json
T

301 lines
12 KiB
JSON
Raw Blame History

This file contains invisible Unicode characters
This file contains invisible Unicode characters that are indistinguishable to humans but may be processed differently by a computer. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
{
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"cveMetadata": {
"cveId": "CVE-2024-2161",
"assignerOrgId": "455daabc-a392-441d-aa46-37d35189897c",
"state": "PUBLISHED",
"assignerShortName": "NCSC.ch",
"dateReserved": "2024-03-04T13:18:31.014Z",
"datePublished": "2024-03-21T06:00:17.957Z",
"dateUpdated": "2024-08-02T15:06:30.673Z"
},
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "affected",
"product": "NDI",
"vendor": "Kiloview",
"versions": [
{
"status": "unaffected",
"version": "N3 Firmware 2.02.0227"
},
{
"status": "unaffected",
"version": "N3-s Firmware 2.02.0227"
},
{
"status": "unaffected",
"version": "N4 Firmware 2.02.0227"
},
{
"status": "unaffected",
"version": "N20 Firmware 2.02.0227"
},
{
"status": "unaffected",
"version": "N30 Firmware 2.02.0227"
},
{
"status": "unaffected",
"version": "N40 Firmware 2.02.0227"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Milan Duric, EBU"
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Use of Hard-coded Credentials in Kiloview NDI allows un-authenticated users to bypass authentication<p>This issue affects&nbsp;Kiloview NDI N3, N3-s, N4, N20, N30, N40 and was fixed in Firmware version&nbsp;2.02.0227 .</p>"
}
],
"value": "Use of Hard-coded Credentials in Kiloview NDI allows un-authenticated users to bypass authenticationThis issue affects Kiloview NDI N3, N3-s, N4, N20, N30, N40 and was fixed in Firmware version 2.02.0227 .\n\n"
}
],
"impacts": [
{
"capecId": "CAPEC-115",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-115 Authentication Bypass"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-798",
"description": "CWE-798 Use of Hard-coded Credentials",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"orgId": "455daabc-a392-441d-aa46-37d35189897c",
"shortName": "NCSC.ch",
"dateUpdated": "2024-03-21T06:00:17.957Z"
},
"references": [
{
"tags": [
"release-notes"
],
"url": "https://www.kiloview.com/en/support/download/n3-for-ndi/"
},
{
"tags": [
"release-notes"
],
"url": "https://www.kiloview.com/en/support/download/n3-s-firmware-download/"
},
{
"tags": [
"release-notes"
],
"url": "https://www.kiloview.com/en/support/download/1779/"
},
{
"tags": [
"release-notes"
],
"url": "https://www.kiloview.com/en/support/download/n20-firmware-download/"
},
{
"tags": [
"release-notes"
],
"url": "https://www.kiloview.com/en/support/download/n30-for-ndi/"
},
{
"tags": [
"release-notes"
],
"url": "https://www.kiloview.com/en/support/download/n40/"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Upgrade to the firmware 2.02.0227 or later<br>"
}
],
"value": "Upgrade to the firmware 2.02.0227 or later\n"
}
],
"source": {
"discovery": "EXTERNAL"
},
"title": "Use of Hard-coded Credentials in Kiloview NDI N series products API middleware",
"workarounds": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Restrict access to the \nmanagement interface of all affected Kiloview devices by applying strict firewall rules or other available means.\n<br>"
}
],
"value": "Restrict access to the \nmanagement interface of all affected Kiloview devices by applying strict firewall rules or other available means.\n\n"
}
],
"x_generator": {
"engine": "Vulnogram 0.1.0-dev"
}
},
"adp": [
{
"providerMetadata": {
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE",
"dateUpdated": "2024-08-01T19:03:39.093Z"
},
"title": "CVE Program Container",
"references": [
{
"tags": [
"release-notes",
"x_transferred"
],
"url": "https://www.kiloview.com/en/support/download/n3-for-ndi/"
},
{
"tags": [
"release-notes",
"x_transferred"
],
"url": "https://www.kiloview.com/en/support/download/n3-s-firmware-download/"
},
{
"tags": [
"release-notes",
"x_transferred"
],
"url": "https://www.kiloview.com/en/support/download/1779/"
},
{
"tags": [
"release-notes",
"x_transferred"
],
"url": "https://www.kiloview.com/en/support/download/n20-firmware-download/"
},
{
"tags": [
"release-notes",
"x_transferred"
],
"url": "https://www.kiloview.com/en/support/download/n30-for-ndi/"
},
{
"tags": [
"release-notes",
"x_transferred"
],
"url": "https://www.kiloview.com/en/support/download/n40/"
}
]
},
{
"affected": [
{
"vendor": "kiloview",
"product": "ndi_n4_firmware",
"cpes": [
"cpe:2.3:o:kiloview:ndi_n20_firmware:2.02.0227:*:*:*:*:*:*:*",
"cpe:2.3:o:kiloview:ndi_n30_firmware:2.02.0227:*:*:*:*:*:*:*",
"cpe:2.3:o:kiloview:ndi_n3_firmware:2.02.0227:*:*:*:*:*:*:*",
"cpe:2.3:o:kiloview:ndi_n3-s_firmware:2.02.0227:*:*:*:*:*:*:*",
"cpe:2.3:o:kiloview:ndi_n40_firmware:2.02.0227:*:*:*:*:*:*:*",
"cpe:2.3:o:kiloview:ndi_n4_firmware:2.02.0227:*:*:*:*:*:*:*"
],
"defaultStatus": "affected",
"versions": [
{
"version": "2.02.0227",
"status": "affected"
}
]
}
],
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2024-08-02T15:00:37.605387Z",
"id": "CVE-2024-2161",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2024-08-02T15:06:30.673Z"
}
}
]
}
}
View Git Blame Copy Permalink