The vulnerability resides in an inadequately validated time zone parameter within Kiloview E3 firmware. An attacker who is authenticated can manipulate the parameter to cause the operating system’s /etc/localtime symlink to point to an arbitrary file outside the intended zoneinfo directory. This allows the attacker to alter the system clock configuration or potentially obtain sensitive files accessible through the misconfigured path. The flaw is a classic operating‑system path traversal (CWE‑22) and does not directly execute arbitrary code, but it can lead to broader compromise if misused in conjunction with other weaknesses.

Kiloview E3 Firmware devices running any firmware version prior to v1.30 are susceptible. The vendor recommends upgrading to firmware version 1.30, which updates the input validation logic for the time zone parameter.

The CVSS score of 6.0 places this vulnerability in the medium severity band. EPSS data is unavailable, and the flaw has not been listed in CISA’s KEV catalog, indicating a moderate likelihood of exploitation. Because the attack requires authentication and manipulation of firmware settings, the exploitability relies on privileged access to the device. Nonetheless, once authenticated, the attacker can redirect critical configuration files, which could impair time‑sensitive operations or expose additional sensitive data.