Kiloview vulnerabilities, page 2
23 vulnerabilities
Known vulnerabilities in Kiloview products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 17 products.
HighCVE-2023-41926kiloview · p1/p2Insufficiently protected credentials in Kiloview P1/P2 devicesThe webserver utilizes basic authentication for its user login to the configuration interface. As encryption is disabled on port 80, it enables potential eavesdropping on user traffic, making it possible to intercept their credentials.EPSS0.26%HighCVE-2023-41923kiloview · p1/p2Weak Password Requirements in Kiloview P1/P2 devicesThe user management section of the web application permits the creation of user accounts with excessively weak passwords, including single-character passwords.EPSS0.27%HighCVE-2023-41922kiloview · p1_firmware +2 moreImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Kiloview P1/P2 devicesA 'Cross-site Scripting' (XSS) vulnerability, characterized by improper input neutralization during web page generation, has been discovered. This vulnerability allows for Stored XSS attacks to occur. Multiple areas within the administration interface of the webserver lack adequate input validation, resulting in multiple instances of Stored XSS vulnerabilities.EPSS0.24%