CVE-2025-8915

Hardcoded TLS private key in Kiloview N30 firmware

CVSS 8.7 HIGHEPSS 0.2%CWE-200

Vexday Risk Score

21Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS 8.7EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

13 Oct 2025Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

Hardcoded TLS private key and certificate in firmware in Kiloview N30 2.02.246 allows malicious adversary to do a Mann-in-the-middle attack via the network

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L

Affected products

Kiloview · N30

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://www.kiloview.com/en/support/download/n30-firmware-downloadlatest/