The vulnerability permits an unauthenticated reset of the administrator password to a known value, allowing an attacker to gain full control of camera feeds and configuration settings. This flaw aligns with CWE‑620 and effectively removes the device’s authentication barrier, making it possible to manipulate or view sensitive security footage without permission.

The affected devices are KMW KM‑IP421 and KM‑IP521 security cameras. Firmware updates are available from KMW’s repository, but specific version ranges are not disclosed in the advisory. After applying the update, KM‑IP421 may lose cloud authorization, requiring re‑authorization of P2P connections via customer support.

The CVSS score of 9.1 indicates high severity, and while an EPSS score is not available, the lack of authentication implies a straightforward network‑based exploitation path. Based on the description, it is inferred that the attacker can issue an unauthenticated password reset command over a network connection to the camera, granting immediate full control. The flaw is not listed in CISA’s KEV catalog, but the ease of resetting passwords without credentials makes it a significant risk in networks where these cameras are directly exposed.