Three Vulnerabilities in Swann Communications SWIFI-SE2KIC Allow Unauthorized Video Access

CISA has issued an advisory detailing three critical vulnerabilities affecting Swann Communications SWIFI-SE2KIC firmware versions 2.0.22 and prior. These flaws, identified as CVE-2026-107605, CVE-2026-107606, and CVE-2026-107607, all fall under the CWE-306 category of Missing Authentication for Critical Function. Successful exploitation could allow an attacker on the same local network to gain unauthorized access to sensitive video information.

The vulnerabilities specifically enable local network attackers to view live video feeds or retrieve snapshots without requiring any form of authentication. This poses a significant risk to users who rely on these devices for security and surveillance, as their video streams could be intercepted and viewed by malicious actors operating within their network perimeter. The CVSS v3.1 base score for these vulnerabilities is rated at 6.2, classifying them as medium severity, but their impact on privacy and security is considerable.

Swann Communications, the manufacturer, has acknowledged the affected product: SWIFI-SE2KIC firmware with versions less than or equal to 2.0.22. The company has provided interim security measures for users, emphasizing that a permanent fix may not yet be available. Users are advised to contact Swann Communications directly for the latest information and support regarding these vulnerabilities.

As mitigation strategies, Swann recommends several key security practices. Primarily, users should ensure their cameras are kept behind a secured router and firewall. This network segmentation is crucial in preventing direct external access to the camera devices. Additionally, users should avoid exposing Real-Time Streaming Protocol (RTSP) services to the internet through methods like port forwarding, DMZ configurations, or direct public IP access.

Further recommendations include enforcing strong, unique passwords for all router and associated network accounts. This basic security hygiene can prevent unauthorized access to the network infrastructure that protects the cameras. Finally, Swann advises users to keep their device firmware updated whenever new releases become available, as future updates may address these specific vulnerabilities more directly.

The affected product, SWIFI-SE2KIC firmware, is deployed worldwide, with Swann Communications headquartered in Australia. The vulnerabilities were discovered and reported by CISA, highlighting the ongoing efforts to identify and disclose security weaknesses in industrial control systems and connected devices. The advisory serves as a critical alert for organizations and individuals using this specific Swann product.

While the CVSS scores indicate medium severity, the nature of the vulnerability—allowing unauthorized viewing of live video feeds—can have severe privacy implications. The lack of authentication for critical functions means that any attacker gaining a foothold on the local network can immediately compromise the video surveillance capabilities of the device. This underscores the importance of robust network security and prompt patching of IoT and surveillance devices.