Every CVE Search/ Get API key

CVE-2023-41928

Remote server offers deprecated TLS protocol in Kiloview P1/P2 devices

5.3 Medium

The device is observed to accept deprecated TLS protocols, increasing the risk of cryptographic weaknesses.

Attack profile

How easy it is to exploit

Attack vector
Adjacent network
Complexity
High
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
None
Availability
None

Exploit likelihood

0.13%Up 0.1 points since Jul 2, 2024
90%50%10%1%

What each source reports

CVE List Score used 5.3

Remote server offers deprecated TLS protocol in Kiloview P1/P2 devices

The device is observed to accept deprecated TLS protocols, increasing the risk of cryptographic weaknesses.

Record
CVE-2023-41928
CVSS 3.1
5.3 MediumCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Weakness
CWE-327
Updated
2026-11-02
EUVDEUVD-2023-46405 5.3

The device is observed to accept deprecated TLS protocols, increasing the risk of cryptographic weaknesses.

Record
EUVD-2023-46405
CVSS 3.1
5.3 MediumCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-03
GitHub AdvisoriesGHSA-ww76-ppx6-58rm 5.3

The device is observed to accept deprecated TLS protocols, increasing the risk of cryptographic...

The device is observed to accept deprecated TLS protocols, increasing the risk of cryptographic weaknesses.

Record
GHSA-ww76-ppx6-58rm
CVSS 3.1
5.3 MediumCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Weakness
CWE-327
Updated
2026-11-02
NVD 5.3

The device is observed to accept deprecated TLS protocols, increasing the risk of cryptographic weaknesses.

Record
CVE-2023-41928
CVSS 3.1
5.3 MediumCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Weakness
CWE-327
Updated
2026-11-02

Affected products

History

History
RecordedChangedSources
aliases, publishedEUVD
first indexedCVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2023-41928 is a medium vulnerability (CVSS 5.3) in Kiloview P1/p2, published July 2, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.13%, the 2nd percentile. No source names a fixed version.

References

MoveEnter Open