2 lines
3.9 KiB
JSON
2 lines
3.9 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"affected","product":"NDI","vendor":"Kiloview","versions":[{"status":"unaffected","version":"N3 Firmware 2.02.0227"},{"status":"unaffected","version":"N3-s Firmware 2.02.0227"},{"status":"unaffected","version":"N4 Firmware 2.02.0227"},{"status":"unaffected","version":"N20 Firmware 2.02.0227"},{"status":"unaffected","version":"N30 Firmware 2.02.0227"},{"status":"unaffected","version":"N40 Firmware 2.02.0227"}]}],"source":"vulnerability@ncsc.ch"},{"affectedData":[{"cpes":["cpe:2.3:o:kiloview:ndi_n20_firmware:2.02.0227:*:*:*:*:*:*:*","cpe:2.3:o:kiloview:ndi_n30_firmware:2.02.0227:*:*:*:*:*:*:*","cpe:2.3:o:kiloview:ndi_n3_firmware:2.02.0227:*:*:*:*:*:*:*","cpe:2.3:o:kiloview:ndi_n3-s_firmware:2.02.0227:*:*:*:*:*:*:*","cpe:2.3:o:kiloview:ndi_n40_firmware:2.02.0227:*:*:*:*:*:*:*","cpe:2.3:o:kiloview:ndi_n4_firmware:2.02.0227:*:*:*:*:*:*:*"],"defaultStatus":"affected","product":"ndi_n4_firmware","vendor":"kiloview","versions":[{"status":"affected","version":"2.02.0227"}]}],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Use of Hard-coded Credentials in Kiloview NDI allows un-authenticated users to bypass authenticationThis issue affects Kiloview NDI N3, N3-s, N4, N20, N30, N40 and was fixed in Firmware version 2.02.0227 .\n\n"},{"lang":"es","value":"El uso de credenciales codificadas en Kiloview NDI permite a los usuarios no autenticados omitir la autenticación. Este problema afecta a Kiloview NDI N3, N3-s, N4, N20, N30, N40 y se solucionó en la versión de firmware 2.02.0227."}],"id":"CVE-2024-2161","lastModified":"2026-06-17T07:23:50.723","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":5.9,"source":"vulnerability@ncsc.ch","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2024-2161","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2024-08-02T15:00:37.605387Z","version":"2.0.3"}}]},"published":"2024-03-21T06:15:46.690","references":[{"source":"vulnerability@ncsc.ch","url":"https://www.kiloview.com/en/support/download/1779/"},{"source":"vulnerability@ncsc.ch","url":"https://www.kiloview.com/en/support/download/n20-firmware-download/"},{"source":"vulnerability@ncsc.ch","url":"https://www.kiloview.com/en/support/download/n3-for-ndi/"},{"source":"vulnerability@ncsc.ch","url":"https://www.kiloview.com/en/support/download/n3-s-firmware-download/"},{"source":"vulnerability@ncsc.ch","url":"https://www.kiloview.com/en/support/download/n30-for-ndi/"},{"source":"vulnerability@ncsc.ch","url":"https://www.kiloview.com/en/support/download/n40/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://www.kiloview.com/en/support/download/1779/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://www.kiloview.com/en/support/download/n20-firmware-download/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://www.kiloview.com/en/support/download/n3-for-ndi/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://www.kiloview.com/en/support/download/n3-s-firmware-download/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://www.kiloview.com/en/support/download/n30-for-ndi/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://www.kiloview.com/en/support/download/n40/"}],"sourceIdentifier":"vulnerability@ncsc.ch","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-798"}],"source":"vulnerability@ncsc.ch","type":"Secondary"}]}
|