CVE-2026-110825: Kiloview E3 NDI Encoder Missing Authentication for Critical Function
The ONVIF device service on affected Kiloview E3 NDI encoder firmware accepts hostname, DNS, and NTP configuration write operations without requiring authentication, regardless of the device's configured authentication setting for this service. A remote, unauthenticated attacker can alter the device hostname, redirect DNS resolution, or modify the configured time source, enabling follow on attacks such as traffic interception or certificate validation bypass.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Kiloview E3 NDI Encoderto a version that resolves this vulnerability.Fixed in V1.30
Event History
Frequently Asked Questions
Which deployments are exposed to unauthenticated configuration changes?
Affected Kiloview E3 NDI Encoder firmware is exposed through its ONVIF device service. The service accepts hostname, DNS, and NTP write operations without authentication regardless of the authentication setting configured for that service.
What does an attacker need to exploit this issue?
An attacker needs remote network access to the affected device's ONVIF device service. No authentication or user interaction is required.
What configuration changes can an attacker make, and why do they matter?
An attacker can change the device hostname, DNS resolver configuration, or NTP time source. These changes may support follow-on attacks including traffic interception or bypassing certificate validation.