{"id":"CVE-2025-9265","state":"PUBLISHED","title":"API Authentication Bypass via Header Spoofing vulnerability in Kiloview NDI N30 Products","description":"A broken authorization vulnerability in Kiloview NDI N30 allows a remote unauthenticated attacker to deactivate user verification, giving them access to state changing actions that should only be initiated by administratorsThis issue affects \n\n Kiloview NDI N30\n\nand was fixed in Firmware version later than  2.02.0246","publishedAt":"2025-10-13T06:57:45.195Z","updatedAt":"2025-10-14T13:19:43.818Z","severity":{"score":10,"label":"Critical","version":"4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H","source":"NCSC.ch"},"assigner":"NCSC.ch","products":["Kiloview NDI"],"affected":[{"vendor":"Kiloview","product":"NDI","defaultStatus":"affected","versions":[{"version":"2.02.246","status":"affected","versionType":"N30 Firmware"}],"collectionURL":"https://www.kiloview.com/en/support/download/n30-for-ndi/"}],"references":["https://www.kiloview.com/en/support/download/n30-firmware-downloadlatest/"],"weaknesses":["CWE-346","CWE-290","CWE-287"],"ingestedAt":"2026-10-29T20:10:13.529Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/9xxx/CVE-2025-9265.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2025-9265","state":"PUBLISHED","datePublished":"2025-10-13T06:57:45.195Z","dateUpdated":"2025-10-14T13:19:43.818Z","assignerShortName":"NCSC.ch","assignerOrgId":"455daabc-a392-441d-aa46-37d35189897c","dateReserved":"2025-08-20T14:20:57.768Z"},"containers":{"cna":{"title":"API Authentication Bypass via Header Spoofing vulnerability in Kiloview NDI N30 Products","descriptions":[{"lang":"en","value":"A broken authorization vulnerability in Kiloview NDI N30 allows a remote unauthenticated attacker to deactivate user verification, giving them access to state changing actions that should only be initiated by administratorsThis issue affects \n\n Kiloview NDI N30\n\nand was fixed in Firmware version later than  2.02.0246"}],"affected":[{"vendor":"Kiloview","product":"NDI","defaultStatus":"affected","versions":[{"version":"2.02.246","status":"affected","versionType":"N30 Firmware"}],"collectionURL":"https://www.kiloview.com/en/support/download/n30-for-ndi/"}],"references":[{"url":"https://www.kiloview.com/en/support/download/n30-firmware-downloadlatest/","tags":["release-notes"]}],"metrics":[{"cvssV4_0":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","baseScore":10,"baseSeverity":"CRITICAL","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"HIGH","subConfidentialityImpact":"HIGH","subIntegrityImpact":"HIGH","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-346","description":"CWE-346 Origin Validation Error","lang":"en","type":"CWE"}]},{"descriptions":[{"cweId":"CWE-290","description":"CWE-290 Authentication Bypass by Spoofing","lang":"en","type":"CWE"}]},{"descriptions":[{"cweId":"CWE-287","description":"CWE-287 Improper Authentication","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"NCSC.ch","orgId":"455daabc-a392-441d-aa46-37d35189897c","dateUpdated":"2025-10-13T06:57:45.195Z"},"credits":[{"lang":"en","type":"finder","value":"Joakim Brandt - NRK (Norsk rikskringkasting AS)"},{"lang":"en","type":"coordinator","value":"Louis Dumas"}],"impacts":[{"capecId":"CAPEC-22","descriptions":[{"lang":"en","value":"CAPEC-22 Exploiting Trust in Client"}]},{"capecId":"CAPEC-21","descriptions":[{"lang":"en","value":"CAPEC-21 Exploitation of Trusted Identifiers"}]},{"capecId":"CAPEC-115","descriptions":[{"lang":"en","value":"CAPEC-115: Authentication Bypass."}]},{"capecId":"CAPEC-151","descriptions":[{"lang":"en","value":"CAPEC-151 Identity Spoofing"}]}],"source":{"discovery":"EXTERNAL"},"x_generator":{"engine":"Vulnogram 0.2.0"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-10-14T13:19:29.801041Z","id":"CVE-2025-9265","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-10-14T13:19:43.818Z"}}]}}}