FKIE_CVE-2024-2162
Vulnerability from fkie_nvd - Published: 2024-03-21 06:15 - Updated: 2026-06-17 07:23
Severity
Summary
An OS Command Injection vulnerability in Kiloview NDI allows a low-privileged user to execute arbitrary code remotely on the device with high privileges.
This issue affects Kiloview NDI N3, N3-s, N4, N20, N30, N40 and was fixed in Firmware version 2.02.0227 .
References
Impacted products
| Vendor | Product | Version |
|---|
{
"affected": [
{
"affectedData": [
{
"defaultStatus": "affected",
"product": "NDI",
"vendor": "Kiloview",
"versions": [
{
"status": "unaffected",
"version": "N3 Firmware 2.02.0227"
},
{
"status": "unaffected",
"version": "N3-s Firmware 2.02.0227"
},
{
"status": "unaffected",
"version": "N4 Firmware 2.02.0227"
},
{
"status": "unaffected",
"version": "N20 Firmware 2.02.0227"
},
{
"status": "unaffected",
"version": "N30 Firmware 2.02.0227"
},
{
"status": "unaffected",
"version": "N40 Firmware 2.02.0227"
}
]
}
],
"source": "vulnerability@ncsc.ch"
},
{
"affectedData": [
{
"cpes": [
"cpe:2.3:o:kiloview:ndi_n3_firmware:2.02.0227:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "ndi_n3_firmware",
"vendor": "kiloview",
"versions": [
{
"status": "affected",
"version": "2.02.0227"
}
]
},
{
"cpes": [
"cpe:2.3:o:kiloview:ndi_n3-s_firmware:2.02.0227:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "ndi_n3-s_firmware",
"vendor": "kiloview",
"versions": [
{
"status": "affected",
"version": "2.02.0227"
}
]
},
{
"cpes": [
"cpe:2.3:o:kiloview:ndi_n4_firmware:2.02.0227:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "ndi_n4_firmware",
"vendor": "kiloview",
"versions": [
{
"status": "affected",
"version": "2.02.0227"
}
]
},
{
"cpes": [
"cpe:2.3:o:kiloview:ndi_n20_firmware:2.02.0227:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "ndi_n20_firmware",
"vendor": "kiloview",
"versions": [
{
"status": "affected",
"version": "2.02.0227"
}
]
},
{
"cpes": [
"cpe:2.3:o:kiloview:ndi_n30_firmware:2.02.0227:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "ndi_n30_firmware",
"vendor": "kiloview",
"versions": [
{
"status": "affected",
"version": "2.02.0227"
}
]
},
{
"cpes": [
"cpe:2.3:o:kiloview:ndi_n40_firmware:2.02.0227:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "ndi_n40_firmware",
"vendor": "kiloview",
"versions": [
{
"status": "affected",
"version": "2.02.0227"
}
]
}
],
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "An OS Command Injection vulnerability in Kiloview NDI allows a low-privileged user to execute arbitrary code remotely on the device with high privileges.\n\nThis issue affects Kiloview NDI N3, N3-s, N4, N20, N30, N40 and was fixed in Firmware version 2.02.0227 .\n\n"
},
{
"lang": "es",
"value": "Una vulnerabilidad de inyecci\u00f3n de comandos del sistema operativo en Kiloview NDI permite a un usuario con pocos privilegios ejecutar c\u00f3digo arbitrario de forma remota en el dispositivo con altos privilegios. Este problema afecta a Kiloview NDI N3, N3-s, N4, N20, N30, N40 y se solucion\u00f3 en la versi\u00f3n de firmware 2.02.0227."
}
],
"id": "CVE-2024-2162",
"lastModified": "2026-06-17T07:23:50.847",
"metrics": {
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"exploitabilityScore": 2.8,
"impactScore": 5.9,
"source": "vulnerability@ncsc.ch",
"type": "Secondary"
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2024-2162",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-03-28T19:04:38.388761Z",
"version": "2.0.3"
}
}
]
},
"published": "2024-03-21T06:15:47.073",
"references": [
{
"source": "vulnerability@ncsc.ch",
"url": "https://www.kiloview.com/en/support/download/1779/"
},
{
"source": "vulnerability@ncsc.ch",
"url": "https://www.kiloview.com/en/support/download/n20-firmware-download/"
},
{
"source": "vulnerability@ncsc.ch",
"url": "https://www.kiloview.com/en/support/download/n3-for-ndi/"
},
{
"source": "vulnerability@ncsc.ch",
"url": "https://www.kiloview.com/en/support/download/n3-s-firmware-download/"
},
{
"source": "vulnerability@ncsc.ch",
"url": "https://www.kiloview.com/en/support/download/n30-for-ndi/"
},
{
"source": "vulnerability@ncsc.ch",
"url": "https://www.kiloview.com/en/support/download/n40/"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://www.kiloview.com/en/support/download/1779/"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://www.kiloview.com/en/support/download/n20-firmware-download/"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://www.kiloview.com/en/support/download/n3-for-ndi/"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://www.kiloview.com/en/support/download/n3-s-firmware-download/"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://www.kiloview.com/en/support/download/n30-for-ndi/"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://www.kiloview.com/en/support/download/n40/"
}
],
"sourceIdentifier": "vulnerability@ncsc.ch",
"vulnStatus": "Deferred",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-78"
}
],
"source": "vulnerability@ncsc.ch",
"type": "Secondary"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…