Swann Communications SWIFI-SE2KIC
Swann SWIFI-SE2KIC firmware through 2.0.22 can expose live video without authentication on the local network.
40
Vulnerability1 · 1 read
CVE-2026-107605
Missing auth exposes live video on Swann SWIFI-SE2KIC
- CVSS 4.0
- 5.9 medium
- EPSS
- —
- Published
- ·
- Modified
AI analysisSummaries by Vani AI
Swann Communications SWIFI-SE2KIC camera firmware 2.0.22 and earlier is missing authentication on a critical function (CWE-306). An attacker who can reach the device on the local network can open the live video feed without logging in. The impact is disclosure of the camera’s video only; integrity and availability of the device are not affected, and CISA’s Known Exploited Vulnerabilities catalog does not list this CVE. CVSS 4.0 rates the issue 5.9 (medium), with a local attack vector and high confidentiality impact on the vulnerable system. No public proof-of-concept is known, and exploitation in the wild has not been reported.
What to do: Upgrade SWIFI-SE2KIC firmware to a release newer than 2.0.22 as soon as Swann publishes one; the advisory does not name a fixed build. Until then, keep these cameras off shared or guest Wi-Fi, restrict LAN access to trusted devices, and confirm the live-view path still requires authentication after any update.
| Product | Affected |
|---|---|
| Swann Communications SWIFI-SE2KIC | firmware 2.0.22 and prior |
Estimated exposure
No basis for an estimate.
Order-of-magnitude estimate by the model from install counts, market share and public scan data it knows; verify before quoting.
Description · NVD
SWIFI-SE2KIC firmware versions 2.0.22 and prior are vulnerable to a Missing Authentication for Critical Function vulnerability that could allow an attacker on the local network to view live video feed without authentication.
- Weakness
- CWE-306
- Vector
- CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X