Description
SWIFI-SE2KIC firmware versions 2.0.22 and prior are vulnerable to a Missing Authentication for Critical Function vulnerability that could allow an attacker on the local network to view live video feed without authentication.
Published: 2026-10-13
Score: 5.9 Medium
EPSS: n/a
KEV: No
Impact: Unauthorized access to camera video feed on the local network
Action: Apply Mitigation
AI Analysis

Impact

This vulnerability permits an unauthenticated local‑network user to view the live video stream from the SWIFI‑SE2KIC device by accessing its RTSP service without an authentication check. The impact is confined to exposure of sensitive video content, which can lead to privacy violations or enable planning of additional attacks against the host or connected network.

Affected Systems

Swann Communications SWIFI‑SE2KIC camera models running firmware versions 2.0.22 or earlier are affected.

Risk and Exploitability

The CVSS score of 5.9 indicates medium severity. The flaw requires an attacker to be on the local network or to gain bridge/connectivity to that network; if achieved, the attacker can freely stream video. No EPSS data is available and the vulnerability is not listed in the CISA KEV catalog, so the current probability of exploitation is uncertain, but the lack of a vendor patch increases the urgency of mitigations.

Generated by OpenCVE AI on October 13, 2026 at 19:23 UTC.

Remediation

Vendor Workaround

Swann Communications has provided the following interim security measures. For more information, contact Swann Communications https://support.swann.com/hc/en-us/requests/new. * Keep the camera behind a secured router and firewall. * Avoid exposing RTSP services to the internet through port forwarding, DMZ configurations, or direct public IP access. * Ensure the router and associated accounts use strong, unique passwords. * Keep device firmware updated when new releases become available.

OpenCVE Recommended Actions

  • Place the camera behind a secured router or firewall to restrict local network exposure.
  • Do not expose the camera’s RTSP service to the Internet; block or restrict port forwarding, DMZ, or direct public‑IP access.
  • Ensure router and associated accounts use strong, unique passwords.
  • Keep the device firmware updated when new releases become available.

Generated by OpenCVE AI on October 13, 2026 at 19:23 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 13 Oct 2026 18:30:00 +0000

Type Values Removed Values Added
Description SWIFI-SE2KIC firmware versions 2.0.22 and prior are vulnerable to a Missing Authentication for Critical Function vulnerability that could allow an attacker on the local network to view live video feed without authentication.
Title Missing authentication for critical function in Swann Communications SWIFI-SE2KIC
Weaknesses CWE-306
References
Metrics cvssV3_1

{'score': 6.2, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'}

cvssV4_0

{'score': 5.9, 'vector': 'CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N'}

Subscriptions

No data.

cve-icon MITRE

Status: PUBLISHED

Assigner: icscert

Published:

Updated: 2026-10-13T18:17:17.966Z

Reserved: 2026-10-08T12:57:45.649Z

Link: CVE-2026-107605

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-10-13T19:18:01.927

Modified: 2026-10-13T19:30:29.797

Link: CVE-2026-107605

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-13T19:30:12Z

Weaknesses
  • CWE-306

    Missing Authentication for Critical Function