The Kiloview E3 NDI encoder firmware signs session JSON Web Tokens with a hard‑coded HMAC‑SHA256 key that is identical on all devices. An attacker who obtains a copy of the publicly available firmware can extract this constant key and use it to forge tokens that grant administrative privileges, bypassing authentication entirely.

Devices running Kiloview E3 firmware before V1.30 are affected. The vulnerability exists in the authentication framework of the E3 NDI encoder firmware; any operator deploying the older firmware revision is at risk.

With a CVSS score of 8.7 the vulnerability is classified as high impact. The EPSS score is not available, and the vendor has not listed it in CISA’s KEV catalog. Nonetheless, the secret can be recovered from the freely distributed firmware image, so the exploitation path is readily achievable by anyone who can download the firmware. The attack requires no privileged network access and can be performed remotely by forging tokens at the application level, resulting in full administrative control of the device.