PT-2024-13012 · Kiloview · P1/P2+2

Published 2024-07-02 · Updated 2024-07-02 · CVE-2023-41921

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned.

Description A vulnerability exists that allows attackers to download and execute code from a remote location without properly verifying its origin and integrity. This can enable attackers to modify firmware before it is uploaded to a system, potentially compromising the system's integrity.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-494

Related Identifiers

CVE-2023-41921

Affected Products

P1/P2

P1 4G Video Encoder Firmware

P2 4G Video Encoder Firmware

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2023-41921 · Security Note
• https://advisories.ncsc.nl/advisory?id=NCSC-2024-0273 · Note