CVE-2023-41926: Insufficiently protected credentials in Kiloview P1/P2 devices
The webserver utilizes basic authentication for its user login to the configuration interface. As encryption is disabled on port 80, it enables potential eavesdropping on user traffic, making it possible to intercept their credentials.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-41926?
CVE-2023-41926 is classified as a high-severity vulnerability due to its potential for credential interception.
How do I fix CVE-2023-41926?
To fix CVE-2023-41926, implement encryption using HTTPS on the webserver's login interface to protect user credentials.
What impact does CVE-2023-41926 have on user data?
CVE-2023-41926 allows potential attackers to eavesdrop on user traffic, compromising sensitive login credentials.
Which products are affected by CVE-2023-41926?
CVE-2023-41926 affects Kiloview P1 and P2 models utilizing basic authentication over an unencrypted connection.
Is there a workaround for CVE-2023-41926?
As a temporary workaround for CVE-2023-41926, users should avoid accessing the configuration interface over unsecured connections.