Description
A missing authentication for critical function vulnerability in KiloView Encoder Series could allow an unauthenticated attacker to create or delete administrator accounts. This vulnerability can grant the attacker full administrative control over the product.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
KiloView Encoder Series E1 hardware Version 1.4
Default version status: unaffected
4.7.2516affected
KiloView Encoder Series E1 hardware Version 1.6.20
Default version status: unaffected
4.7.2511affected4.8.2523affected4.8.2611affected4.6.2400affected4.7.2512affected4.8.2561affected4.8.2554affected4.3.2029affected4.8.2555affected4.6.2408affected
KiloView Encoder Series E1-s hardware Version 1.4
Default version status: unaffected
4.7.2516affected4.8.2519affected4.8.2525affected4.8.2611affected4.8.2561affected4.8.2554affected4.8.2523affected
KiloView Encoder Series E2 hardware Version 1.7.20
Default version status: unaffected
4.8.2611affected4.8.2561affected
KiloView Encoder Series E2 hardware Version 1.8.20
Default version status: unaffected
4.8.2523affected4.8.2611affected4.8.2554affected
KiloView Encoder Series G1 hardware Version 1.6.20
Default version status: unaffected
4.8.2561affected
KiloView Encoder Series P1 hardware Version 1.3.20
Default version status: unaffected
4.8.2633affected4.8.2608affected
KiloView Encoder Series P2 hardware Version 1.8.20
Default version status: unaffected
4.8.2633affected
KiloView Encoder Series RE1 hardware Version 2.0.00
Default version status: unaffected
4.7.2513affected
KiloView Encoder Series RE1 hardware Version 3.0.00
Default version status: unaffected
4.8.2519affected4.8.2561affected4.8.2611affected4.8.2525affected