CVEvulnerability

CVE-2025-9265

10.0 CRITICAL Published 2025-10-13 Modified 2026-10-18 Official page ↗
Status
Deferred
Published
2025-10-13
Last modified
2026-10-18
Assigner
[email protected]
CVSS 4.0 ([email protected])
10.0 CRITICAL — CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weaknesses
CWE-287, CWE-290, CWE-346

Description

A broken authorization vulnerability in Kiloview NDI N30 allows a remote unauthenticated attacker to deactivate user verification, giving them access to state changing actions that should only be initiated by administratorsThis issue affects Kiloview NDI N30 and was fixed in Firmware version later than 2.02.0246

Related

Weakness · CWE (3)

  • CWE-287 Improper Authentication weakness
  • CWE-290 Authentication Bypass by Spoofing weakness
  • CWE-346 Origin Validation Error weakness

References