Swann Communications SWIFI-SE2KIC
Swann SWIFI-SE2KIC firmware through 2.0.22 can expose live video without authentication on the local network.
40
CVE-2026-107607
Missing Auth Exposes Swann SWIFI-SE2KIC Live Video
- CVSS 4.0
- 6.9 medium
- EPSS
- —
- Published
- ·
- Modified
AI analysisSummaries by Vani AI
Swann Communications SWIFI-SE2KIC firmware 2.0.22 and earlier is missing authentication on a critical function that serves the live video stream (CWE-306). An attacker who can reach the camera on the local network can open the real-time video feed without credentials. The result is disclosure of video only (high confidentiality, no integrity or availability impact), scored CVSS 4.0 6.9. Devices running those firmware versions are affected. The issue is not in CISA KEV and no public proof-of-concept is known.
What to do: Install a Swann firmware release newer than 2.0.22 when one is available and confirm the camera is no longer running 2.0.22 or earlier. Until then, keep the device on a segmented LAN and block untrusted hosts from reaching its video service, since local-network access alone is enough to view the stream.
| Product | Affected |
|---|---|
| Swann Communications SWIFI-SE2KIC | firmware 2.0.22 and prior |
Estimated exposure
No basis for an estimate.
Order-of-magnitude estimate by the model from install counts, market share and public scan data it knows; verify before quoting.
Description · NVD
SWIFI-SE2KIC firmware versions 2.0.22 and prior are vulnerable to a Missing Authentication for Critical Function vulnerability that could allow an attacker on the local network to access a real-time video stream without authentication.
- Weakness
- CWE-306
- Vector
- CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X