CVE-2025-8915: Hardcoded TLS private key in Kiloview N30 firmware

Published Oct 13, 2025

Updated

Hardcoded TLS private key and certificate in firmware in Kiloview N30 2.02.246 allows malicious adversary to do a Mann-in-the-middle attack via the network

Affected Software

1 affected component

Kiloview N30

Event History

Oct 13, 2025

CVE Published

via MITRE·06:58 AM

Data Sourced

via MITRE·06:58 AM

DescriptionWeakness

Data Sourced

via NVD·07:15 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2025-8915?

CVE-2025-8915 has been classified as a high severity vulnerability due to the potential for Man-in-the-Middle attacks.

How do I fix CVE-2025-8915?

To fix CVE-2025-8915, users should update to the latest firmware version provided by Kiloview that resolves the hardcoded TLS private key issue.

What software is affected by CVE-2025-8915?

CVE-2025-8915 specifically affects the Kiloview N30 version 2.02.246 firmware.

What type of attack can CVE-2025-8915 facilitate?

CVE-2025-8915 can facilitate a Man-in-the-Middle attack, allowing an adversary to intercept and manipulate network communications.

Is there a workaround for CVE-2025-8915 while waiting for a patch?

There are currently no documented workarounds for CVE-2025-8915; applying the firmware update as soon as available is recommended.