PT-2025-41763 · Kiloview · Kiloview N30

Louis Dumas · Published 2025-10-13 · Updated 2025-10-13 · CVE-2025-8915

Positive Technologies (AI Summary)

CVSS v4.0

8.7

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L

Name of the Vulnerable Software and Affected Versions Kiloview N30 version 2.02.246

Description The firmware contains a hardcoded TLS private key and certificate. This allows a malicious actor to perform a man-in-the-middle attack over the network.

Recommendations It is recommended to upgrade the device firmware to the fixed version 3.01, released on October 11, 2025. This version includes security enhancements that address this vulnerability, among other potential issues.

Important Note: Due to changes in the firmware upgrade mechanism, upgrading from version 2.x requires first installing an intermediate upgrade package (N30-9999-upgrade-firmware). After installing this intermediate package, a manual refresh of the web interface is required before proceeding with the upgrade to version 3.01.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2025-8915

Affected Products

Kiloview N30

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-8915 · Security Note
• https://kiloview.com/en/support/download/n30-firmware-downloadlatest · Note
• https://t.me/CVEtracker/34754 · Telegram Post
• https://t.me/cveNotify/138426 · Telegram Post