A path traversal flaw exists in the Kenik camera management panel that lets an unauthenticated user send a crafted GET request with an arbitrary file path and read the corresponding file from the server. This allows confidential data, such as configuration files or credentials, to be exposed to an attacker, constituting a remote file read vulnerability.

The vulnerability affects the Kenik camera family including models KG-5230DAS-IL-G3, KG-5230TAS-IL-3, KG-5230TAS-IL-G3, KG-5260DZAS-IL-3, KG-5260DZAS-IL-G3, KG-5260TZAS-IL-3, KG-5260TZAS-IL-G3, and the generic KG-5260xxxx-IL-(G)2 line. All firmware versions prior to 2025-04-21 are vulnerable, except for the KG-5260xxxx-IL-(G)2 which requires at least 2026-04-23 to be secure.

The CVSS score of 8.3 indicates high severity, and the EPSS score is currently unavailable, though the issue has not been listed in the CISA KEV catalog. Attackers can exploit the flaw remotely by issuing an HTTP GET request to the camera’s management interface – no authentication is required. Successful exploitation grants read access to any file on the server, which could expose sensitive data. The threat is significant, especially for devices exposed directly to the internet or lacking proper network segmentation.