PT-2025-41764 · Kiloview · Kiloview Ndi N30

Louis Dumas · Published 2025-10-13 · Updated 2025-10-13 · CVE-2025-9265

Positive Technologies (AI Summary)

CVSS v4.0

10

Critical

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions Kiloview NDI N30 versions prior to 2.02.0246

Description A broken authorization allows a remote, unauthenticated attacker to disable user verification, granting access to administrative actions. This impacts Kiloview NDI N30.

Recommendations Update to Firmware version 2.02.0246 or later.

Fix

Improper Authentication

Origin Validation Error

Authentication Bypass by Spoofing

Weakness Enumeration

CWE-287

CWE-346

CWE-290

Related Identifiers

CVE-2025-9265

Affected Products

Kiloview Ndi N30

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-9265 · Security Note
• https://kiloview.com/en/support/download/n30-firmware-downloadlatest · Note
• https://t.me/cveNotify/138427 · Telegram Post
• https://t.me/CVEtracker/34755 · Telegram Post