CVE-2026-111100
CVE-2026-111100 · Kiloview E3 NDI Encoder Missing Authentication for Critical Function
This page contains facts from public vulnerability sources. Check the original advisory before updating.
The ONVIF device service on the E3 responds to certain informational requests without requiring authentication. A remote, unauthenticated party can retrieve detailed device identifiers along with a list of configured user accounts and their privilege levels. This aids attackers in fingerprinting vulnerable devices and preparing targeted credential attacks.
CVSS 6.9 · Medium · EPSS 0.3% · Fix available
- Published
- Updated
Affected products and versions
e3 firmware
- Versions
- ≥ 0, < 1.30: Affected (custom)
- 1.30: Not affected
Update to 1.30