CVE-2023-41921
Critical
Description
A vulnerability allows attackers to download source code or an executable from a remote location and execute the code without sufficiently verifying the origin and integrity of the code. This vulnerability can allow attackers to modify the firmware before uploading it to the system, thus achieving the modification of the target’s integrity to achieve an insecure state.
SeverityCritical
CVSS9.8
Exploit probability—
ProductP1/P2
PublishedJul 2, 2024
First seenJul 2, 2024
Weakness typeCWE-494CWE-494
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Kiloview P1/P2 | v ≤ 4.8.2605 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.