جزئیات آسیب‌پذیری
CVE-2026-1453
Kiloview Encoder Series E1 hardwareKiloview Encoder Series E1-s hardwareKiloview Encoder Series E2 hardwareKiloview Encoder Series G1 hardwareKiloview Encoder Series P1 hardwareKiloview Encoder Series P2 hardware
Missing Authentication for Critical Function in KiloView Encoder Series
CVSS 4.0
9.3بحرانی
شرح رسمی (انگلیسی)
A missing authentication for critical function vulnerability in KiloView Encoder Series could allow an unauthenticated attacker to create or delete administrator accounts. This vulnerability can grant the attacker full administrative control over the product.
امتیازهای CVSS
| امتیاز | نسخه | منبع | بردار |
|---|---|---|---|
| 9.3بحرانی | 4.0 | CVEProject cvelistV5 (CNA) (icscert) | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N |
| 9.8بحرانی | 3.1 | CVEProject cvelistV5 (CNA) (icscert) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
محصولات آسیب‌پذیر
| فروشنده | محصول | نسخه‌ها | منبع |
|---|---|---|---|
| Kiloview | Encoder Series E1 hardware Version 1.4 | 4.7.2516 | CVEProject cvelistV5 (CNA) |
| Kiloview | Encoder Series E1 hardware Version 1.6.20 | 4.3.2029 | CVEProject cvelistV5 (CNA) |
| Kiloview | Encoder Series E1 hardware Version 1.6.20 | 4.6.2400 | CVEProject cvelistV5 (CNA) |
| Kiloview | Encoder Series E1 hardware Version 1.6.20 | 4.6.2408 | CVEProject cvelistV5 (CNA) |
| Kiloview | Encoder Series E1 hardware Version 1.6.20 | 4.7.2511 | CVEProject cvelistV5 (CNA) |
| Kiloview | Encoder Series E1 hardware Version 1.6.20 | 4.7.2512 | CVEProject cvelistV5 (CNA) |
| Kiloview | Encoder Series E1 hardware Version 1.6.20 | 4.8.2523 | CVEProject cvelistV5 (CNA) |
| Kiloview | Encoder Series E1 hardware Version 1.6.20 | 4.8.2554 | CVEProject cvelistV5 (CNA) |
| Kiloview | Encoder Series E1 hardware Version 1.6.20 | 4.8.2555 | CVEProject cvelistV5 (CNA) |
| Kiloview | Encoder Series E1 hardware Version 1.6.20 | 4.8.2561 | CVEProject cvelistV5 (CNA) |
| Kiloview | Encoder Series E1 hardware Version 1.6.20 | 4.8.2611 | CVEProject cvelistV5 (CNA) |
| Kiloview | Encoder Series E1-s hardware Version 1.4 | 4.7.2516 | CVEProject cvelistV5 (CNA) |
| Kiloview | Encoder Series E1-s hardware Version 1.4 | 4.8.2519 | CVEProject cvelistV5 (CNA) |
| Kiloview | Encoder Series E1-s hardware Version 1.4 | 4.8.2523 | CVEProject cvelistV5 (CNA) |
| Kiloview | Encoder Series E1-s hardware Version 1.4 | 4.8.2525 | CVEProject cvelistV5 (CNA) |
| Kiloview | Encoder Series E1-s hardware Version 1.4 | 4.8.2554 | CVEProject cvelistV5 (CNA) |
| Kiloview | Encoder Series E1-s hardware Version 1.4 | 4.8.2561 | CVEProject cvelistV5 (CNA) |
| Kiloview | Encoder Series E1-s hardware Version 1.4 | 4.8.2611 | CVEProject cvelistV5 (CNA) |
| Kiloview | Encoder Series E2 hardware Version 1.7.20 | 4.8.2561 | CVEProject cvelistV5 (CNA) |
| Kiloview | Encoder Series E2 hardware Version 1.7.20 | 4.8.2611 | CVEProject cvelistV5 (CNA) |
| Kiloview | Encoder Series E2 hardware Version 1.8.20 | 4.8.2523 | CVEProject cvelistV5 (CNA) |
| Kiloview | Encoder Series E2 hardware Version 1.8.20 | 4.8.2554 | CVEProject cvelistV5 (CNA) |
| Kiloview | Encoder Series E2 hardware Version 1.8.20 | 4.8.2611 | CVEProject cvelistV5 (CNA) |
| Kiloview | Encoder Series G1 hardware Version 1.6.20 | 4.8.2561 | CVEProject cvelistV5 (CNA) |
| Kiloview | Encoder Series P1 hardware Version 1.3.20 | 4.8.2608 | CVEProject cvelistV5 (CNA) |
| Kiloview | Encoder Series P1 hardware Version 1.3.20 | 4.8.2633 | CVEProject cvelistV5 (CNA) |
| Kiloview | Encoder Series P2 hardware Version 1.8.20 | 4.8.2633 | CVEProject cvelistV5 (CNA) |
| Kiloview | Encoder Series RE1 hardware Version 2.0.00 | 4.7.2513 | CVEProject cvelistV5 (CNA) |
| Kiloview | Encoder Series RE1 hardware Version 3.0.00 | 4.8.2519 | CVEProject cvelistV5 (CNA) |
| Kiloview | Encoder Series RE1 hardware Version 3.0.00 | 4.8.2525 | CVEProject cvelistV5 (CNA) |
| Kiloview | Encoder Series RE1 hardware Version 3.0.00 | 4.8.2561 | CVEProject cvelistV5 (CNA) |
| Kiloview | Encoder Series RE1 hardware Version 3.0.00 | 4.8.2611 | CVEProject cvelistV5 (CNA) |
منابع و راهنماها
۲
هشدار CVEهای بعدی این محصولمحصول را دنبال کنید تا آسیب‌پذیری‌های تازه را در تلگرام بگیرید.
اطلاعات
- تاریخ انتشار
- ۱۴۰۴/۱۱/۰۹
- آخرین به‌روزرسانی
- ۱۴۰۴/۱۱/۰۹
- وضعیت
- منتشرشده
- صادرکننده (CNA)
- icscert
پیش‌بینی بهره‌برداری (EPSS)
۰٫۵۳٪
احتمال بهره‌برداری در ۳۰ روز
۴۵٫۵٪
صدک (نسبت به همه‌ی CVEها)
ارزیابی SSVC (CISA)
- قابل خودکارسازی
- بله
- وضعیت بهره‌برداری
- ندارد
- اثر فنی
- کامل
ضعف‌ها (CWE)
- CWE-306Missing Authentication for Critical Function