Time Zone Parameter Vulnerability in Kiloview E3 Firmware
CVE-2026-105265
6MEDIUM
What is CVE-2026-105265?
An input validation vulnerability exists in the time zone parameter of Kiloview E3 Firmware. This flaw allows an authenticated user to manipulate the /etc/localtime file, potentially redirecting it to an unauthorized file outside the designated zoneinfo directory. Such an oversight can lead to unauthorized access to sensitive data or misconfiguration of time settings, making it imperative for users of the firmware to apply recommended updates and security best practices.
Affected Version(s)
E3 Firmware 0 < 1.30
E3 Firmware 1.30
References
CVSS V4
Score:
6
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None
Timeline
Vulnerability published
Vulnerability Reserved
Credit
Juan Alonso reported this vulnerability to CISA.