Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage
Back

CVE-2024-2161

Use of Hard-coded Credentials in Kiloview NDI N series products API middleware

Critical9.8EPSS 0.91%
Published
Updated
Reserved
Assigned by
NCSC.ch

Description

Use of Hard-coded Credentials in Kiloview NDI allows un-authenticated users to bypass authenticationThis issue affects Kiloview NDI N3, N3-s, N4, N20, N30, N40 and was fixed in Firmware version 2.02.0227 .

Scores

CVSS scores of CVE-2024-2161, by who scored it
Scored byCVSSScoreVector
NCSC.chCNA (assigner)3.1Critical9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVDNVD · Deferred3.1Critical9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS (exploitation in 30 days)
0.91% · top 40% of all CVEs (7 Nov 2026)
CISA SSVC
Exploitation: none · Automatable: yes · Technical impact: total
Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: Critical 9.8.

Weakness

Affected products

  • Kiloview · NDI

    • unaffected N3 Firmware 2.02.0227
    • unaffected N3-s Firmware 2.02.0227
    • unaffected N4 Firmware 2.02.0227
    • unaffected N20 Firmware 2.02.0227
    • unaffected N30 Firmware 2.02.0227
    • unaffected N40 Firmware 2.02.0227

What to do

Solution: Upgrade to the firmware 2.02.0227 or later

Workaround: Restrict access to the management interface of all affected Kiloview devices by applying strict firewall rules or other available means.

References (6)

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

CVE-2024-2161 badge
[![CVE-2024-2161](https://trackcve.app/badge/CVE-2024-2161.svg)](https://trackcve.app/cve/CVE-2024-2161)

Record last updated .