The Kiloview E3 NDI encoder’s ONVIF device service accepts hostname, DNS, and NTP configuration write operations without requiring authentication, regardless of the device configured authentication setting. An attacker who can reach the ONVIF endpoint can change the device’s hostname, redirect DNS resolution, or alter the time source, providing a foothold for traffic interception, certificate validation bypass, and other follow‑on attacks. These changes can compromise the device’s confidentiality, integrity, and availability, effectively allowing an unauthenticated attacker to reconfigure the device in ways that facilitate broader network compromise.

The vulnerability affects Kiloview E3 NDI encoder firmware running any unreleased version prior to the V1.30 update. No specific firmware revisions are listed in the current data, but the official recommendation is to upgrade to V1.30 from Kiloview’s website.

The CVSS score of 8.7 indicates a high severity vulnerability, and the EPSS score is not available to provide a likelihood estimate. The vulnerability is not listed in CISA’s KEV catalog. The likely attack vector is remote network; an attacker only needs network connectivity to the ONVIF service and no authentication to exploit the flaw. The combination of a high impact and a simple network‑based exploitation path results in a high operational risk for deployments that expose the ONVIF service to untrusted networks.