Denial of Service Vulnerability in E3 ONVIF Service by Kiloview
CVE-2026-110491
6.9MEDIUM
What is CVE-2026-110491?
The ONVIF service on the Kiloview E3 can become unresponsive due to the reception of malformed or incomplete requests. While this service becomes overloaded and stops accepting new connections, the E3 device continues to function normally for other operations. Notably, this issue can be exploited by any unauthenticated user with network access and can be triggered repeatedly. After a designated period, the ONVIF service recovers automatically, which poses a risk to the overall availability of the device.
Affected Version(s)
E3 Firmware 0 < 1.30
E3 Firmware 1.30
References
CVSS V4
Score:
6.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None
Timeline
Vulnerability published
Vulnerability Reserved
Credit
Juan Alonso reported this vulnerability to CISA.