Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage
Back

CVE-2024-2162

Authenticated Remote Code Execution in Kiloview NDI N series products

High8.8EPSS 2.1%
Published
Updated
Reserved
Assigned by
NCSC.ch

Description

An OS Command Injection vulnerability in Kiloview NDI allows a low-privileged user to execute arbitrary code remotely on the device with high privileges. This issue affects Kiloview NDI N3, N3-s, N4, N20, N30, N40 and was fixed in Firmware version 2.02.0227 .

Scores

CVSS scores of CVE-2024-2162, by who scored it
Scored byCVSSScoreVector
NCSC.chCNA (assigner)3.1High8.8CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVDNVD · Deferred3.1High8.8CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS (exploitation in 30 days)
2.1% · top 18% of all CVEs (6 Nov 2026)
CISA SSVC
Exploitation: none · Automatable: no · Technical impact: total
Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 8.8.

Weakness

Affected products

  • Kiloview · NDI

    • unaffected N3 Firmware 2.02.0227
    • unaffected N3-s Firmware 2.02.0227
    • unaffected N4 Firmware 2.02.0227
    • unaffected N20 Firmware 2.02.0227
    • unaffected N30 Firmware 2.02.0227
    • unaffected N40 Firmware 2.02.0227

What to do

Solution: Upgrade to the firmware 2.02.0227 or later

Workaround: Restrict access to the management interface of all affected Kiloview devices by applying strict firewall rules or other available means.

References (6)

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

CVE-2024-2162 badge
[![CVE-2024-2162](https://trackcve.app/badge/CVE-2024-2162.svg)](https://trackcve.app/cve/CVE-2024-2162)

Record last updated .