CVE-2025-9265

critical · 10

A broken authorization vulnerability in Kiloview NDI N30 allows a remote unauthenticated attacker to deactivate user verification, giving them access to state changing actions that should only be initiated by administratorsThis issue affects Kiloview NDI N30 and was fixed in Firmware version later than 2.02.0246

CVSS

0.2%

EPSS (exploit prob.)

16th

EPSS percentile

2025-10-13

Published

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Weaknesses

CWE-287CWE-290CWE-346

References

https://www.kiloview.com/en/support/download/n30-firmware-downloadlatest/

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2025-9265