Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2024-2162

Authenticated Remote Code Execution in Kiloview NDI N series products

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
NCSC.ch

Description

An OS Command Injection vulnerability in Kiloview NDI allows a low-privileged user to execute arbitrary code remotely on the device with high privileges. This issue affects Kiloview NDI N3, N3-s, N4, N20, N30, N40 and was fixed in Firmware version 2.02.0227 .

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Kiloview NDI

Default version status: affected

  • N3 Firmware 2.02.0227unaffected
  • N3-s Firmware 2.02.0227unaffected
  • N4 Firmware 2.02.0227unaffected
  • N20 Firmware 2.02.0227unaffected
  • N30 Firmware 2.02.0227unaffected
  • N40 Firmware 2.02.0227unaffected

References