Approved changes feed: RSS · Atom
cpe:2.3:a:kiloview:p1/p2:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Kiloview (f3578cfb-3483-5287-a7c8-34cd79a6f050) |
|---|---|
| Product | P1/P2 (4f09b855-f536-5273-936b-39c0c49e0f10) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-41928 |
vulnerable | 2026-06-08 06:11:07.433715 |
Remote server offers deprecated TLS protocol in Kiloview P1/P2 devices
MEDIUM (5.3)
The device is observed to accept deprecated TLS protocols, increasing the risk of cryptographic weaknesses.
Published: 2024-07-02T07:43:31.998Z
Updated: 2024-08-02T19:09:49.433Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-41927 |
vulnerable | 2026-06-08 06:11:07.433323 |
Weak TLS Cipher Suites Supported in Kiloview P1/P2 devices
MEDIUM (5.3)
The server supports at least one cipher suite which is on the NCSC-NL list of cipher suites to be phased out, increasing the risk of cryptographic weaknesses.
Published: 2024-07-02T07:43:25.640Z
Updated: 2024-08-02T19:09:49.292Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-41926 |
vulnerable | 2026-06-08 06:11:07.432932 |
Insufficiently protected credentials in Kiloview P1/P2 devices
HIGH (8.8)
The webserver utilizes basic authentication for its user login to the configuration interface. As encryption is disabled on port 80, it enables potential eavesdropping on user traffic, making it possible to intercept their credentials.
Published: 2024-07-02T07:43:16.362Z
Updated: 2024-08-02T19:09:49.320Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-41923 |
vulnerable | 2026-06-08 06:11:07.432268 |
Weak Password Requirements in Kiloview P1/P2 devices
HIGH (7.2)
The user management section of the web application permits the creation of user accounts with excessively weak passwords, including single-character passwords.
Published: 2024-07-02T07:42:49.840Z
Updated: 2024-08-02T19:09:49.428Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-41922 |
vulnerable | 2026-06-08 06:11:07.428356 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Kiloview P1/P2 devices
HIGH (7.2)
A 'Cross-site Scripting' (XSS) vulnerability, characterized by improper input neutralization during web page generation, has been discovered. This vulnerability allows for Stored XSS attacks to occur. Multiple areas within the administration interface of the webserver lack adequate input validation, resulting in multiple instances of Stored XSS vulnerabilities.
Published: 2024-07-02T07:42:42.031Z
Updated: 2024-08-02T19:09:49.427Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-41921 |
vulnerable | 2026-06-08 06:11:07.427878 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-41920 |
vulnerable | 2026-06-08 06:11:07.427334 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-41919 |
vulnerable | 2026-06-08 06:11:07.422714 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-41918 |
vulnerable | 2026-06-08 06:11:07.422013 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-41917 |
vulnerable | 2026-06-08 06:11:07.421381 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.