IM
IronMonkey Threat Research
‹ Back to ICS Advisories

Swann Communications SWIFI-SE2KIC

MEDIUM
CVSS 6.2
Date 2026-10-13T06:00:00+00:00
Source cisa-csaf
Published by CISA

// Description

Successful exploitation of these vulnerabilities could allow an attacker to view video information without authentication.

// Vulnerabilities (3)

CVE ID CVSS Score Severity Description
CVE-2026-107606 6.2 medium
SWIFI-SE2KIC firmware versions 2.0.22 and prior are vulnerable to a Missing Authentication for Critical Function vulnerability that could allow an attacker on the local network to retrieve a snapshot of the live feed without authentication.
CVE-2026-107607 6.2 medium
SWIFI-SE2KIC firmware versions 2.0.22 and prior are vulnerable to a Missing Authentication for Critical Function vulnerability that could allow an attacker on the local network to access a real-time video stream without authentication.
CVE-2026-107605 6.2 medium
SWIFI-SE2KIC firmware versions 2.0.22 and prior are vulnerable to a Missing Authentication for Critical Function vulnerability that could allow an attacker on the local network to view live video feed without authentication.

// Remediations (5)

Mitigation: Swann Communications has provided the following interim security measures. For more information, con
Swann Communications has provided the following interim security measures. For more information, contact Swann Communications https://support.swann.com/hc/en-us/requests/new.
Mitigation: Avoid exposing RTSP services to the internet through port forwarding, DMZ configurations, or direct
Avoid exposing RTSP services to the internet through port forwarding, DMZ configurations, or direct public IP access.
Mitigation: Keep the camera behind a secured router and firewall.
Keep the camera behind a secured router and firewall.
Mitigation: Ensure the router and associated accounts use strong, unique passwords.
Ensure the router and associated accounts use strong, unique passwords.
Mitigation: Keep device firmware updated when new releases become available.
Keep device firmware updated when new releases become available.

// References