Bug 2559409 (CVE-2026-111100)
| Summary: | CVE-2026-111100 Kiloview E3 Firmware: Kiloview E3: Information disclosure via unauthenticated ONVIF requests | ||
|---|---|---|---|
| Product: | [Other] Security Response | Reporter: | OSIDB Bzimport <bzimport> |
| Component: | vulnerability-draft | Assignee: | Product Security <prodsec-ir-bot> |
| Status: | NEW --- | QA Contact: | |
| Severity: | medium | Docs Contact: | |
| Priority: | medium | ||
| Version: | unspecified | Keywords: | Security |
| Target Milestone: | --- | ||
| Target Release: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | --- | |
| Doc Text: |
A flaw was found in the Kiloview E3 Open Network Video Interface Forum (ONVIF) device service. The service responds to specific informational requests without requiring authentication, resulting in information disclosure. A remote, unauthenticated attacker can exploit this issue to retrieve sensitive device identifiers, configured user accounts, and their associated privilege levels. This information can assist attackers in device fingerprinting and planning targeted credential attacks.
|
Story Points: | --- |
| Clone Of: | Environment: | ||
| Last Closed: | Type: | --- | |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
|
Description
OSIDB Bzimport
2026-10-22 22:07:47 UTC
|