CVE-2023-41927 MEDIUM

CVE-2023-41927: Weak TLS Cipher Suites Supported in Kiloview P1/P2 devices

Vendor Kiloview

Product P1/P2

Weakness CWE-327 · Broken crypto

Published July 2, 2024

Last update August 2, 2024

View on NVD All CVEs

CVSS base score

5.3/10

Attack vector Adjacent

Attack complexity High

Privileges required None

User interaction None

Confidentiality High

Integrity None

CVSS vector

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

What the vulnerability does

01Description

The server supports at least one cipher suite which is on the NCSC-NL list of cipher suites to be phased out, increasing the risk of cryptographic weaknesses.

Key dates

02Disclosure timeline

July 2, 2024 CVE published

August 2, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2023-41927 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/327.html