CVE-2024-2161: Use of Hard-coded Credentials in Kiloview NDI N series products API middleware
Use of Hard-coded Credentials in Kiloview NDI allows un-authenticated users to bypass authenticationThis issue affects Kiloview NDI N3, N3-s, N4, N20, N30, N40 and was fixed in Firmware version 2.02.0227 .
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2024-2161?
CVE-2024-2161 has a high severity level due to the use of hard-coded credentials allowing unauthenticated access.
How do I fix CVE-2024-2161?
To fix CVE-2024-2161, update your Kiloview NDI devices to firmware version 2.02.0227 or later.
Which devices are affected by CVE-2024-2161?
CVE-2024-2161 affects Kiloview NDI N3, N3-s, N4, N20, N30, and N40 devices up to firmware version 2.02.0227.
What happens if I do not address CVE-2024-2161?
Failing to address CVE-2024-2161 leaves your Kiloview NDI devices vulnerable to unauthorized access and exploitation.
Is there any workaround for CVE-2024-2161?
There are no reliable workarounds for CVE-2024-2161; upgrading to the fixed firmware is the only effective solution.