Our takeCISA reports active exploitation in Kiloview E3 NDI Encoder firmware below 1.30 (nine CVEs). Update to 1.30 immediately if you run these devices.Security Resilience desk
Sources (2)
- cisa_advisories · cisa_advisories
- cisa_ics · cisa_ics
What this means for you — Security leader:Patch all Kiloview E3 NDI Encoder devices to firmware 1.30 or later immediately; CISA reports active exploitation of nine vulnerabilities that allow full device compromise.
What this means for you — Lean IT orgs:If you use a Kiloview E3 NDI Encoder for video, update its firmware to version 1.30 or newer right away. CISA says attackers are already exploiting these flaws to take over the device.
What this means for you — MSP:Audit client environments for any Kiloview E3 NDI Encoder devices running firmware below 1.30 and upgrade them; CISA states these nine vulnerabilities are under active exploitation.
What this means for you — Researcher:CISA ICSA-26-295-01 details nine vulnerabilities in Kiloview E3 NDI Encoder firmware <1.30 that enable full device compromise and are under active exploitation.