CVE-2025-9265: API Authentication Bypass via Header Spoofing vulnerability in Kiloview NDI N30 Products
A broken authorization vulnerability in Kiloview NDI N30 allows a remote unauthenticated attacker to deactivate user verification, giving them access to state changing actions that should only be initiated by administratorsThis issue affects
Kiloview NDI N30
and was fixed in Firmware version later than 2.02.0246
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-9265?
CVE-2025-9265 is considered a critical vulnerability due to its ability to allow remote unauthenticated attackers to deactivate user verification.
How do I fix CVE-2025-9265?
To fix CVE-2025-9265, update the Kiloview NDI N30 device to the latest firmware version 2.02.0246 or later.
What kind of systems are affected by CVE-2025-9265?
CVE-2025-9265 specifically affects the Kiloview NDI N30 device.
Can CVE-2025-9265 be exploited remotely?
Yes, CVE-2025-9265 can be exploited remotely by unauthenticated attackers.
What actions can be affected by CVE-2025-9265?
CVE-2025-9265 allows attackers to initiate state changing actions that are typically restricted to administrators.