Files
vuln-nvd/data/2026/CVE-2026-1453.json
T

2 lines
6.0 KiB
JSON

{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Encoder Series E1 hardware Version 1.4","vendor":"KiloView","versions":[{"status":"affected","version":"4.7.2516"}]},{"defaultStatus":"unaffected","product":"Encoder Series E1 hardware Version 1.6.20","vendor":"KiloView","versions":[{"status":"affected","version":"4.7.2511"},{"status":"affected","version":"4.8.2523"},{"status":"affected","version":"4.8.2611"},{"status":"affected","version":"4.6.2400"},{"status":"affected","version":"4.7.2512"},{"status":"affected","version":"4.8.2561"},{"status":"affected","version":"4.8.2554"},{"status":"affected","version":"4.3.2029"},{"status":"affected","version":"4.8.2555"},{"status":"affected","version":"4.6.2408"}]},{"defaultStatus":"unaffected","product":"Encoder Series E1-s hardware Version 1.4","vendor":"KiloView","versions":[{"status":"affected","version":"4.7.2516"},{"status":"affected","version":"4.8.2519"},{"status":"affected","version":"4.8.2525"},{"status":"affected","version":"4.8.2611"},{"status":"affected","version":"4.8.2561"},{"status":"affected","version":"4.8.2554"},{"status":"affected","version":"4.8.2523"}]},{"defaultStatus":"unaffected","product":"Encoder Series E2 hardware Version 1.7.20","vendor":"KiloView","versions":[{"status":"affected","version":"4.8.2611"},{"status":"affected","version":"4.8.2561"}]},{"defaultStatus":"unaffected","product":"Encoder Series E2 hardware Version 1.8.20","vendor":"KiloView","versions":[{"status":"affected","version":"4.8.2523"},{"status":"affected","version":"4.8.2611"},{"status":"affected","version":"4.8.2554"}]},{"defaultStatus":"unaffected","product":"Encoder Series G1 hardware Version 1.6.20","vendor":"KiloView","versions":[{"status":"affected","version":"4.8.2561"}]},{"defaultStatus":"unaffected","product":"Encoder Series P1 hardware Version 1.3.20","vendor":"KiloView","versions":[{"status":"affected","version":"4.8.2633"},{"status":"affected","version":"4.8.2608"}]},{"defaultStatus":"unaffected","product":"Encoder Series P2 hardware Version 1.8.20","vendor":"KiloView","versions":[{"status":"affected","version":"4.8.2633"}]},{"defaultStatus":"unaffected","product":"Encoder Series RE1 hardware Version 2.0.00","vendor":"KiloView","versions":[{"status":"affected","version":"4.7.2513"}]},{"defaultStatus":"unaffected","product":"Encoder Series RE1 hardware Version 3.0.00","vendor":"KiloView","versions":[{"status":"affected","version":"4.8.2519"},{"status":"affected","version":"4.8.2561"},{"status":"affected","version":"4.8.2611"},{"status":"affected","version":"4.8.2525"}]}],"source":"ics-cert@hq.dhs.gov"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A missing authentication for critical function vulnerability in KiloView Encoder Series could allow an unauthenticated attacker to create or delete administrator accounts. This vulnerability can grant the attacker full administrative control over the product."},{"lang":"es","value":"Una vulnerabilidad de ausencia de autenticación para función crítica en la serie de codificadores KiloView podría permitir a un atacante no autenticado crear o eliminar cuentas de administrador. Esta vulnerabilidad puede otorgar al atacante control administrativo total sobre el producto."}],"id":"CVE-2026-1453","lastModified":"2026-06-17T10:15:49.090","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":5.9,"source":"ics-cert@hq.dhs.gov","type":"Secondary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":9.3,"baseSeverity":"CRITICAL","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"ics-cert@hq.dhs.gov","type":"Secondary"}],"ssvcV203":[{"source":"ics-cert@hq.dhs.gov","ssvcData":{"options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CNA","version":"2.0.3"}},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-1453","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-01-29T20:28:37.966375Z","version":"2.0.3"}}]},"published":"2026-01-29T19:16:18.987","references":[{"source":"ics-cert@hq.dhs.gov","url":"https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-029-01.json"},{"source":"ics-cert@hq.dhs.gov","url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-029-01"}],"sourceIdentifier":"ics-cert@hq.dhs.gov","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-306"}],"source":"ics-cert@hq.dhs.gov","type":"Secondary"}]}