CVE-2025-63560

An issue in KiloView Dual Channel 4k HDMI & 3G-SDI HEVC Video Encoder Firmware v.1.20.0006 allows a remote attacker to cause a denial of service via the…

High · published November 6, 2025

CVSS v3.1
7.5
EPSS
1%
Percentile
42.5
In the wild
Unconfirmed
What it is

⚡ Just one call to the wrong API can send your KiloView video encoder into a tailspin! 🔄 Think of it like a restaurant where a customer orders too many dishes at once, causing the kitchen to stall. The systemctrl API is that kitchen, and when overwhelmed, it just shuts down, leaving diners (your service) waiting impatiently. If exploited, a remote attacker could trigger a denial of service, bringing your video encoding operations to a grinding halt. Imagine your streaming setup going dark mid-broadcast – absolutely devastating for any event! This could lead to lost views, frustrated audiences, and potential revenue loss.

Put simply

Think of it like a restaurant where a customer orders too many dishes at once, causing the kitchen to stall. The systemctrl API is that kitchen, and when overwhelmed, it just shuts down, leaving diners (your service) waiting impatiently. This vulnerability resides in the systemctrl API's reFactory component, allowing attackers to overload the encoder by sending excessive requests, thus crashing the system.

What to do

If exploited, a remote attacker could trigger a denial of service, bringing your video encoding operations to a grinding halt. Imagine your streaming setup going dark mid-broadcast – absolutely devastating for any event! This could lead to lost views, frustrated audiences, and potential revenue loss. To mitigate this risk, immediately update the KiloView Dual Channel 4k HDMI & 3G-SDI HEVC Video Encoder firmware to version 1.20.0007 or whichever is the latest stable release. Additionally, consider implementing rate limiting on API calls to prevent overload situations. You've got this! Secure your setup today, and keep those streams shining bright! 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00508 · 42.5th percentile
Published
2025-11-06T00:00Z
EPSS history
Timeline
  • 06 NOV 00:00Z
    An issue in KiloView Dual Channel 4k HDMI & 3G-SDI HEVC Video Encoder Firmware v.1.20.0006 allows a remote attacker to cause a denial of service via the…
    cvelistv5