PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-110825 Kiloview CVE debrief

The Kiloview E3 NDI Encoder has a critical vulnerability allowing unauthenticated configuration changes. This enables follow-on attacks like traffic interception. The vulnerability affects the ONVIF device service, which accepts hostname, DNS, and NTP configuration write operations without requiring authentication. A remote, unauthenticated attacker can alter the device hostname, redirect DNS resolution, or modify the configured time source. This can lead to significant risks in ICS environments, including potential traffic interception, certificate validation bypass, and unauthorized device configuration changes.

Vendor
Kiloview
Product
E3 Firmware
CVSS
HIGH 7.5
CISA KEV
Not listed in stored evidence
Original CVE published
2026-10-22
Original CVE updated
2026-10-23
Advisory published
2026-10-22
Advisory updated
2026-10-23

Who should care

ICS administrators, industrial control systems operators, and network defenders responsible for Kiloview E3 NDI Encoder devices should review and update firmware to version 1.30 or later. They should also implement authentication for the ONVIF device service, monitor device configurations for unauthorized changes, and verify DNS and NTP settings. Vulnerability scanning and review of compensating controls are also recommended.

Why it matters

This vulnerability allows unauthenticated attackers to modify critical configurations on Kiloview E3 NDI Encoders, posing significant risks to ICS environments.

  • Potential for traffic interception
  • Certificate validation bypass risks
  • Unauthorized device configuration changes
  • Possible disruption of critical infrastructure operations

Technical summary

The ONVIF device service on Kiloview E3 NDI encoder firmware accepts configuration write operations without authentication. This allows a remote attacker to alter device settings, including hostname, DNS, and NTP configurations. The vulnerability has a CVSS score of 7.5 and is rated HIGH in severity. It poses significant risks to ICS environments, including potential traffic interception and certificate validation bypass. Affected product deployments should be reviewed for exposure and updated to version 1.30 or later.

Defensive priority

High priority for ICS and industrial control systems, requiring immediate review of Kiloview E3 NDI Encoder configurations.

Recommended defensive actions

  • Review and update Kiloview E3 NDI Encoder firmware to version 1.30 or later
  • Implement authentication for ONVIF device service
  • Monitor device configurations for unauthorized changes
  • Verify DNS and NTP settings
  • Conduct vulnerability scanning
  • Review compensating controls
  • Track exceptions and retest remediated assets

Evidence notes

The CVE record and source item provide details on the vulnerability. Specific affected versions and remediation steps require verification. The vulnerability is critical, with a CVSS score of 7.5 and a HIGH severity rating. The ONVIF device service's lack of authentication for configuration changes poses significant risks. Evidence limits and source grounding indicate that defenders should verify the affected scope and severity. Confirmed affected product deployments should be reviewed for exposure.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-110825 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-110825

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-110825 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-110825

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

  • Kiloview E3 NDI Encoder Missing Authentication for Critical Function

    Unverified legacy reference

    URL: https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110825.json

    cve_program_cvelist_v5

  • Source reference

    Unverified legacy reference

    URL: https://www.kiloview.com/en/download/e3-firmware-downloadlatest-12/

    Supplemental source

  • Source reference

    Unverified legacy reference

    URL: https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-01

    Supplemental source

  • Source reference

    Unverified legacy reference

    URL: https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-295-01.json

    Supplemental source

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.