CVE-2023-41920: Authentication Bypass by Primary Weakness in Kiloview P1/P2 devices
Published Jul 2, 2024
·Updated
The vulnerability allows attackers access to the root account without having to authenticate. Specifically, if the device is configured with the IP address of 10.10.10.10, the root user is automatically logged in.
Affected Software
1 affected component
Kiloview P1/P2
Event History
Jul 2, 2024
CVE Published
via MITRE·07:42 AM
Data Sourced
via MITRE·07:42 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·08:15 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2023-41920?
CVE-2023-41920 is a critical vulnerability that allows unauthorized access to the root account.
2
How do I fix CVE-2023-41920?
To fix CVE-2023-41920, configure your device to prevent automatic login for the root user and review network access policies.
3
Which devices are affected by CVE-2023-41920?
CVE-2023-41920 affects Kiloview P1 and P2 devices.
4
What types of attacks can result from CVE-2023-41920?
CVE-2023-41920 can lead to unauthorized system access, data exfiltration, or manipulation.
5
Is there a patch available for CVE-2023-41920?
Currently, a specific patch for CVE-2023-41920 has not been publicly released, and it's advised to monitor vendor communications for updates.