Kiloview E3 firmware before 1.30 allows root command injection
Nine CVEs affect firmware before 1.30, including unauthenticated ONVIF leaks and a denial of service; KiloView's fix is V1.30.
66
Vulnerability2 · 2 reads
CVE-2026-110825
Unauthenticated ONVIF config writes on Kiloview E3
- CVSS 4.0
- 8.7 high
- EPSS
- —
- Published
- ·
- Modified
AI analysisSummaries by Vani AI
The ONVIF device service on Kiloview E3 NDI encoder firmware accepts hostname, DNS, and NTP write operations without authentication, even when authentication is enabled for that service. A remote, unauthenticated attacker can change the hostname, redirect DNS resolution, or alter the time source. That can support follow-on traffic interception or certificate validation bypass on affected encoders.
What to do: Apply Kiloview's update for CVE-2026-110825 when available. No workaround is stated.
| Product | Affected |
|---|---|
| Kiloview E3 NDI encoder firmware | — |
Estimated exposure
No basis for an estimate.
Order-of-magnitude estimate by the model from install counts, market share and public scan data it knows; verify before quoting.
Description · NVD
The ONVIF device service on affected Kiloview E3 NDI encoder firmware accepts hostname, DNS, and NTP configuration write operations without requiring authentication, regardless of the device's configured authentication setting for this service. A remote, unauthenticated attacker can alter the device hostname, redirect DNS resolution, or modify the configured time source, enabling follow on attacks such as traffic interception or certificate validation bypass.
- Weakness
- CWE-306
- Vector
- CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X