Nine Vulnerabilities Discovered in Kiloview E3 NDI Encoder Firmware
CISA and Kiloview have disclosed nine vulnerabilities affecting the E3 NDI Encoder firmware versions prior to 1.30. The flaws range from OS command injection and missing authentication to insufficient session expiration and hard-coded credentials. Successful exploitation could allow an attacker to execute arbitrary commands as root, exfiltrate device identifiers, maintain persistent access via non-expiring tokens, and fully compromise the device. Kiloview has released firmware version 1.30 addressing all nine CVEs.