{"id":"CVE-2023-41918","aliases":["EUVD-2023-46395","GHSA-6mmq-wfvf-jxf6"],"status":"published","title":"Missing Authentication for Critical Function in Kiloview P1/P2 devices","description":"A vulnerability allows unauthorized access to functionality inadequately constrained by ACLs. Attackers may exploit this to unauthenticated execute commands potentially leading to unauthorized data manipulation, access to privileged functions, or even the execution of arbitrary code.","severity":{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00571,"percentile":0.47543,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-306"],"published":"2024-07-02T07:42:08Z","modified":"2026-06-17T06:23:04Z","products":[{"vendor":"kiloview","product":"p1/p2"},{"vendor":"kiloview","product":"p1_4g_video_encoder_firmware"},{"vendor":"kiloview","product":"p2_4g_video_encoder_firmware"}],"references":[{"url":"https://advisories.ncsc.nl/advisory?id=NCSC-2024-0273","tags":["x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-41918"},{"url":"https://github.com/advisories/GHSA-6mmq-wfvf-jxf6"}],"sources":{"cve":[{"id":"CVE-2023-41918","title":"Missing Authentication for Critical Function in Kiloview P1/P2 devices","description":"A vulnerability allows unauthorized access to functionality inadequately constrained by ACLs. Attackers may exploit this to unauthenticated execute commands potentially leading to unauthorized data manipulation, access to privileged functions, or even the execution of arbitrary code.","status":"published","published":"2024-07-02T07:42:08.26Z","modified":"2024-08-02T19:09:49.35Z","cvss":[{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"cna"}],"cwes":["CWE-306"],"updated_at":"2026-11-02T14:35:19.217111Z"}],"euvd":[{"id":"EUVD-2023-46395","description":"A vulnerability allows unauthorized access to functionality inadequately constrained by ACLs. Attackers may exploit this to unauthenticated execute commands potentially leading to unauthorized data manipulation, access to privileged functions, or even the execution of arbitrary code.","status":"published","published":"2024-07-02T07:42:08Z","modified":"2024-08-02T19:09:49Z","cvss":[{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-03T03:50:01.043754Z"}],"ghsa":[{"id":"GHSA-6mmq-wfvf-jxf6","title":"A vulnerability allows unauthorized access to functionality inadequately constrained by ACLs....","description":"A vulnerability allows unauthorized access to functionality inadequately constrained by ACLs. Attackers may exploit this to unauthenticated execute commands potentially leading to unauthorized data manipulation, access to privileged functions, or even the execution of arbitrary code.","status":"published","published":"2024-07-02T09:32:05Z","modified":"2024-07-02T09:32:06Z","cvss":[{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-306"],"updated_at":"2026-11-02T14:57:32.670649Z"}],"nvd":[{"id":"CVE-2023-41918","description":"A vulnerability allows unauthorized access to functionality inadequately constrained by ACLs. Attackers may exploit this to unauthenticated execute commands potentially leading to unauthorized data manipulation, access to privileged functions, or even the execution of arbitrary code.","status":"published","published":"2024-07-02T08:15:03.49Z","modified":"2026-06-17T06:23:04.333Z","cvss":[{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"secondary"}],"cwes":["CWE-306"],"updated_at":"2026-11-02T14:09:17.205287Z"}]}}