Bug 2559415 (CVE-2026-110825)

Summary: CVE-2026-110825 Kiloview E3 Firmware: Kiloview E3: Unauthorized configuration modification via unauthenticated ONVIF service
Product: [Other] Security Response Reporter: OSIDB Bzimport <bzimport>
Component: vulnerability-draftAssignee: Product Security <prodsec-ir-bot>
Status: NEW --- QA Contact:
Severity: high Docs Contact:
Priority: high    
Version: unspecifiedKeywords: Security
Target Milestone: ---   
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: ---
Doc Text:
A flaw was found in Kiloview E3. The device's Open Network Video Interface Forum (ONVIF) service accepts network and time configuration write operations without enforcing authentication. A remote, unauthenticated attacker can exploit this flaw to alter the device hostname, redirect Domain Name System (DNS) resolution, or tamper with the Network Time Protocol (NTP) time source. This unauthorized modification can enable subsequent attacks, including network traffic interception and security certificate validation bypass.
 Story Points: ---
Clone Of: Environment:
Last Closed: Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description OSIDB Bzimport 2026-10-22 22:28:33 UTC 
The ONVIF device service on affected Kiloview E3 NDI encoder firmware accepts hostname, DNS, and NTP configuration write operations without requiring authentication, regardless of the device's configured authentication setting for this service. A remote, unauthenticated attacker can alter the device hostname, redirect DNS resolution, or modify the configured time source, enabling follow on attacks such as traffic interception or certificate validation bypass.