← CVE Intelligence

CVE-2023-41926

Insufficiently protected credentials in Kiloview P1/P2 devices PUBLISHED

Description (CNA)

The webserver utilizes basic authentication for its user login to the configuration interface. As encryption is disabled on port 80, it enables potential eavesdropping on user traffic, making it possible to intercept their credentials.

Affected (CNA)

Vendor / productVersions
Kiloview / P1/P2affected All through 4.8.2605

CWE

CWE-522

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.