P1 4G Video Encoder Firmware

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:o:kiloview:p1_4g_video_encoder_firmware:-:*:*:*:*:*:*:*

part: o version: - update: *

VendorKiloview (f3578cfb-3483-5287-a7c8-34cd79a6f050)
ProductP1 4G Video Encoder Firmware (5cdb8c31-b56e-556e-b81f-f11d73d55517)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-41926 vulnerable 2026-06-08 06:11:07.432712 Insufficiently protected credentials in Kiloview P1/P2 devices
HIGH (8.8)
The webserver utilizes basic authentication for its user login to the configuration interface. As encryption is disabled on port 80, it enables potential eavesdropping on user traffic, making it possible to intercept their credentials.
Published: 2024-07-02T07:43:16.362Z
Updated: 2024-08-02T19:09:49.320Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41923 vulnerable 2026-06-08 06:11:07.432062 Weak Password Requirements in Kiloview P1/P2 devices
HIGH (7.2)
The user management section of the web application permits the creation of user accounts with excessively weak passwords, including single-character passwords.
Published: 2024-07-02T07:42:49.840Z
Updated: 2024-08-02T19:09:49.428Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41922 vulnerable 2026-06-08 06:11:07.428298 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Kiloview P1/P2 devices
HIGH (7.2)
A 'Cross-site Scripting' (XSS) vulnerability, characterized by improper input neutralization during web page generation, has been discovered. This vulnerability allows for Stored XSS attacks to occur. Multiple areas within the administration interface of the webserver lack adequate input validation, resulting in multiple instances of Stored XSS vulnerabilities.
Published: 2024-07-02T07:42:42.031Z
Updated: 2024-08-02T19:09:49.427Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41921 vulnerable 2026-06-08 06:11:07.427808 Download of Code Without Integrity Check in Kiloview P1/P2 devices
CRITICAL (9.8)
A vulnerability allows attackers to download source code or an executable from a remote location and execute the code without sufficiently verifying the origin and integrity of the code. This vulnerability can allow attackers to modify the firmware before uploading it to the system, thus achieving the modification of the target’s integrity to achieve an insecure state.
Published: 2024-07-02T07:42:33.722Z
Updated: 2024-08-02T19:09:49.427Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41920 vulnerable 2026-06-08 06:11:07.427115 Authentication Bypass by Primary Weakness in Kiloview P1/P2 devices
CRITICAL (9.8)
The vulnerability allows attackers access to the root account without having to authenticate. Specifically, if the device is configured with the IP address of 10.10.10.10, the root user is automatically logged in.
Published: 2024-07-02T07:42:24.484Z
Updated: 2024-08-02T19:09:49.386Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41919 vulnerable 2026-06-08 06:11:07.422444 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41918 vulnerable 2026-06-08 06:11:07.421940 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41917 vulnerable 2026-06-08 06:11:07.420043 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.