Kiloview E3 NDI Encoder NULL Pointer Dereference
- Published
- Last modified
- Status
- published
- Known exploitation
- Not listed in CISA KEV
- Public exploit
- None on Exploit-DB
Summary
The Kiloview E3 NDI encoder's ONVIF service can be made to stop accepting new connections when it receives malformed or incomplete requests, which disrupts device control and management until the service recovers on its own. Because no login is required, anyone with network access to the device can repeatedly cause this disruption.
Summarized by anthropic/claude-haiku-5.5. Verify details against the original sources.
Read the original description
The ONVIF service on the E3 can be rendered unresponsive by sending malformed or incomplete requests to certain operations. The affected service stops accepting new connections while the rest of the device continues operating normally, and will recover automatically after a period. This can be triggered repeatedly by any unauthenticated party with network access to the device.
Affected versions
- Kiloview E3 Firmware
fixed in 1.30