CVE-2025-9265 — API Authentication Bypass via Header Spoofing vulnerability in Kiloview NDI N30 Products

CVE-2025-9265

API Authentication Bypass via Header Spoofing vulnerability in Kiloview NDI N30 Products PUBLISHED

Description (CNA)

A broken authorization vulnerability in Kiloview NDI N30 allows a remote unauthenticated attacker to deactivate user verification, giving them access to state changing actions that should only be initiated by administratorsThis issue affects Kiloview NDI N30 and was fixed in Firmware version later than 2.02.0246

Affected (CNA)

Vendor / product	Versions
Kiloview / NDI	affected 2.02.246

CWE

CWE-346, CWE-290, CWE-287

References

https://www.kiloview.com/en/support/download/n30-firmware-downloadlatest/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.