CVE-2023-41919 - Vulnerability Details - OpenCVE

Hardcoded credentials are discovered within the application's source code, creating a potential security risk for unauthorized access.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Kiloview	P1 P1 Firmware P2 P2 Firmware

Configuration 1 [-]

AND

cpe:2.3:o:kiloview:p2_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:kiloview:p2:-:*:*:*:*:*:*:*

Configuration 2 [-]

AND

cpe:2.3:o:kiloview:p1_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:kiloview:p1:-:*:*:*:*:*:*:*

No data.

References

Link	Providers
https://advisories.ncsc.nl/advisory?id=NCSC-2024-0273

History

Thu, 22 Aug 2024 14:00:00 +0000

Type	Values Removed	Values Added
First Time appeared		Kiloview Kiloview p1 Kiloview p1 Firmware Kiloview p2 Kiloview p2 Firmware
CPEs		cpe:2.3:h:kiloview:p1:-:::::::* cpe:2.3:h:kiloview:p2:-:::::::* cpe:2.3:o:kiloview:p1_firmware:::::::: cpe:2.3:o:kiloview:p2_firmware::::::::
Vendors & Products		Kiloview Kiloview p1 Kiloview p1 Firmware Kiloview p2 Kiloview p2 Firmware

MITRE

Status: PUBLISHED

Assigner: NCSC-NL

Published: 2024-07-02T07:42:16.318Z

Updated: 2024-08-02T19:09:49.323Z

Reserved: 2023-09-05T10:14:50.216Z

Link: CVE-2023-41919

Vulnrichment

Updated: 2024-08-02T19:09:49.323Z

NVD

Status : Modified

Published: 2024-07-02T08:15:03.680

Modified: 2024-11-21T08:21:55.340

Link: CVE-2023-41919

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2023-41919", "assignerOrgId": "cf4a7ff5-dd38-4ede-a530-ffaa7ea59c39", "state": "PUBLISHED", "assignerShortName": "NCSC-NL", "dateReserved": "2023-09-05T10:14:50.216Z", "datePublished": "2024-07-02T07:42:16.318Z", "dateUpdated": "2024-08-02T19:09:49.323Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "cf4a7ff5-dd38-4ede-a530-ffaa7ea59c39", "shortName": "NCSC-NL", "dateUpdated": "2024-07-02T08:20:21.516Z"}, "title": "Use of Hard-coded Credentials in Kiloview P1/P2 devices", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-798", "description": "CWE-798 Use of Hard-coded Credentials", "type": "CWE"}]}], "impacts": [{"capecId": "CAPEC-70", "descriptions": [{"lang": "en", "value": "CAPEC-70 Try Common or Default Usernames and Passwords"}]}], "affected": [{"vendor": "Kiloview", "product": "P1/P2", "versions": [{"status": "affected", "version": "All", "lessThanOrEqual": "4.8.2605", "versionType": "custom"}], "defaultStatus": "affected"}], "descriptions": [{"lang": "en", "value": "Hardcoded credentials are discovered within the application's source code, creating a potential security risk for unauthorized access.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>Hardcoded credentials are discovered within the application's source code, creating a potential security risk for unauthorized access.</p>\n\n\n\n\n\n"}]}], "references": [{"url": "https://advisories.ncsc.nl/advisory?id=NCSC-2024-0273"}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH", "baseSeverity": "CRITICAL", "baseScore": 9.8, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}}], "source": {"discovery": "UNKNOWN"}}, "adp": [{"affected": [{"vendor": "kiloview", "product": "p1_4g_video_encoder_firmware", "cpes": ["cpe:2.3:o:kiloview:p1_4g_video_encoder_firmware:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "*", "versionType": "custom"}]}, {"vendor": "kiloview", "product": "p2_4g_video_encoder_firmware", "cpes": ["cpe:2.3:o:kiloview:p2_4g_video_encoder_firmware:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "*", "versionType": "custom"}]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-07-02T10:53:12.633052Z", "id": "CVE-2023-41919", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-07-02T10:53:17.253Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T19:09:49.323Z"}, "title": "CVE Program Container", "references": [{"url": "https://advisories.ncsc.nl/advisory?id=NCSC-2024-0273", "tags": ["x_transferred"]}]}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://advisories.ncsc.nl/advisory?id=NCSC-2024-0273", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T19:09:49.323Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2023-41919", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2024-07-02T10:53:12.633052Z"}}}], "affected": [{"cpes": ["cpe:2.3:o:kiloview:p1_4g_video_encoder_firmware:-:*:*:*:*:*:*:*"], "vendor": "kiloview", "product": "p1_4g_video_encoder_firmware", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:kiloview:p2_4g_video_encoder_firmware:-:*:*:*:*:*:*:*"], "vendor": "kiloview", "product": "p2_4g_video_encoder_firmware", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "*"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-07-02T10:53:03.471Z"}}], "cna": {"title": "Use of Hard-coded Credentials in Kiloview P1/P2 devices", "source": {"discovery": "UNKNOWN"}, "impacts": [{"capecId": "CAPEC-70", "descriptions": [{"lang": "en", "value": "CAPEC-70 Try Common or Default Usernames and Passwords"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Kiloview", "product": "P1/P2", "versions": [{"status": "affected", "version": "All", "versionType": "custom", "lessThanOrEqual": "4.8.2605"}], "defaultStatus": "affected"}], "references": [{"url": "https://advisories.ncsc.nl/advisory?id=NCSC-2024-0273"}], "descriptions": [{"lang": "en", "value": "Hardcoded credentials are discovered within the application's source code, creating a potential security risk for unauthorized access.", "supportingMedia": [{"type": "text/html", "value": "<p>Hardcoded credentials are discovered within the application's source code, creating a potential security risk for unauthorized access.</p>\n\n\n\n\n\n", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-798", "description": "CWE-798 Use of Hard-coded Credentials"}]}], "providerMetadata": {"orgId": "cf4a7ff5-dd38-4ede-a530-ffaa7ea59c39", "shortName": "NCSC-NL", "dateUpdated": "2024-07-02T08:20:21.516Z"}}}, "cveMetadata": {"cveId": "CVE-2023-41919", "state": "PUBLISHED", "dateUpdated": "2024-08-02T19:09:49.323Z", "dateReserved": "2023-09-05T10:14:50.216Z", "assignerOrgId": "cf4a7ff5-dd38-4ede-a530-ffaa7ea59c39", "datePublished": "2024-07-02T07:42:16.318Z", "assignerShortName": "NCSC-NL"}, "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:kiloview:p2_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "981702C0-11D2-4F9B-AF7F-E55C5B5F07E8", "versionEndIncluding": "4.8.2605", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:kiloview:p2:-:*:*:*:*:*:*:*", "matchCriteriaId": "FAD8304E-A310-4C8F-AA4B-4CE20F3F1943", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:kiloview:p1_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "93E280EE-9B00-428B-A8FF-CC03D5A6EC69", "versionEndIncluding": "4.8.2605", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:kiloview:p1:-:*:*:*:*:*:*:*", "matchCriteriaId": "BC15AF27-4AFD-4D51-B842-651BEE81E7C2", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "descriptions": [{"lang": "en", "value": "Hardcoded credentials are discovered within the application's source code, creating a potential security risk for unauthorized access."}, {"lang": "es", "value": "Las credenciales codificadas se descubren dentro del c\u00f3digo fuente de la aplicaci\u00f3n, lo que crea un riesgo potencial de seguridad para el acceso no autorizado."}], "id": "CVE-2023-41919", "lastModified": "2024-11-21T08:21:55.340", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "cert@ncsc.nl", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2024-07-02T08:15:03.680", "references": [{"source": "cert@ncsc.nl", "tags": ["Third Party Advisory"], "url": "https://advisories.ncsc.nl/advisory?id=NCSC-2024-0273"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "https://advisories.ncsc.nl/advisory?id=NCSC-2024-0273"}], "sourceIdentifier": "cert@ncsc.nl", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-798"}], "source": "cert@ncsc.nl", "type": "Secondary"}, {"description": [{"lang": "en", "value": "CWE-798"}], "source": "nvd@nist.gov", "type": "Primary"}]}