The flaw is a missing authentication check for a critical function that lets any device on the local network retrieve the real‑time video feed from the Swann SWIFI‑SE2KIC camera. Because no credentials are required, the attacker can capture video streams without having to guess or compromise a password, resulting in a confidentiality and privacy breach. The vulnerability is classified as a moderate severity issue, with a CVSS score of 6.9.

Involved product is the Swann Communications SWIFI‑SE2KIC camera model. Firmware versions 2.0.22 and earlier contain the flaw, while versions newer than 2.0.22 are not listed as affected in the advisory. Administrators should verify the firmware level on any SWIFI‑SE2KIC unit deployed in their environment.

Exploitation requires network access to the local LAN segment; the attacker does not need any authenticated session. The CVSS score reflects the confidentiality impact and limited scope. The EPSS score is currently not available, and the vulnerability is not listed in the CISA KEV catalog, indicating no known widespread exploitation. The recommended attack vector is local network attack, and best practice is to keep the camera behind a firewall that restricts RTSP traffic to trusted hosts.