CVE-2026-107605
MediumCVSS 6.2Summary
SWIFI-SE2KIC firmware versions 2.0.22 and prior are vulnerable to a Missing Authentication for Critical Function vulnerability that could allow an attacker on the local network to view live video feed without authentication.
Risk Assessment
An unauthorized user on the local network could view the live camera feed, constituting a privacy breach and potentially facilitating further attacks.
Recommendation
Update SWIFI-SE2KIC firmware to a version later than 2.0.22 and implement network segmentation to limit access to the devices.
Other vulnerabilities in SWIFI-SE2KIC
See all- CVE-2026-107607Medium
SWIFI-SE2KIC firmware versions 2.0.22 and prior are vulnerable to a Missing Authentication for Critical Function vulnerability that could allow an attacker on the local network to access a real-time video stream without authentication.
- CVE-2026-107606Medium
SWIFI-SE2KIC firmware versions 2.0.22 and prior are vulnerable to a Missing Authentication for Critical Function vulnerability that could allow an attacker on the local network to retrieve a snapshot of the live feed without authentication.
Original NVD description (English source)
SWIFI-SE2KIC firmware versions 2.0.22 and prior are vulnerable to a Missing Authentication for Critical Function vulnerability that could allow an attacker on the local network to view live video feed without authentication.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS