CVE-2023-41926CWE-522

Insufficiently protected credentials in Kiloview P1/P2 devices

High · published July 2, 2024

CVSS v3.1
8.8
EPSS
0%
Percentile
16.9
In the wild
Unconfirmed
What it is

The webserver utilizes basic authentication for its user login to the configuration interface. As encryption is disabled on port 80, it enables potential eavesdropping on user traffic, making it possible to intercept their credentials.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00261 · 16.9th percentile
Weakness
CWE-522 · Insufficiently Protected Credentials
Published
2024-07-02T07:43Z
EPSS history
Timeline
  • 02 JUL 07:43Z
    Insufficiently protected credentials in Kiloview P1/P2 devices
    cvelistv5