VulnHub

Real-time Cybersecurity News

Critical

Swann Communications SWIFI-SE2KIC

All CISA Advisories
PhishingCVEExploitVulnerabilityCritical

Overview

Swann Communications has reported vulnerabilities in their SWIFI-SE2KIC camera firmware versions 2.0.22 and earlier that could allow unauthorized access to live video feeds. Specifically, attackers on the same local network could exploit these issues to view video streams or snapshots without needing to authenticate. This situation poses a significant risk, particularly for users who might expose their cameras to the internet. To mitigate these vulnerabilities, Swann recommends keeping the camera behind a secured router and firewall, avoiding direct internet exposure, and ensuring that all devices are updated with the latest firmware. Users should also utilize strong, unique passwords for their router and accounts to enhance security.

Key Takeaways

  • Affected Systems: Swann Communications SWIFI-SE2KIC firmware versions <=2.0.22
  • Action Required: Keep the camera behind a secured router and firewall; avoid exposing RTSP services to the internet through port forwarding, DMZ configurations, or direct public IP access; ensure the router and associated accounts use strong, unique passwords; keep device firmware updated when new releases become available.
  • Timeline: Disclosed on October 2023

Original Article Summary

View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to view video information without authentication. The following versions of Swann Communications SWIFI-SE2KIC are affected: SWIFI-SE2KIC firmware <=2.0.22 (CVE-2026-107605, CVE-2026-107606, CVE-2026-107607) CVSS Vendor Equipment v3 6.2 Swann Communications SWIFI-SE2KIC firmware 1 Vulnerability Missing Authentication for Critical Function Background Critical Infrastructure Sectors: Commercial Facilities Countries/Areas Deployed: Worldwide Company Headquarters Location: Australia Vulnerabilities Expand All + CVE-2026-107605 SWIFI-SE2KIC firmware versions 2.0.22 and prior are vulnerable to a Missing Authentication for Critical Function vulnerability that could allow an attacker on the local network to view live video feed without authentication. Read More 1 Affected Product Swann Communications SWIFI-SE2KIC firmware: <=2.0.22 Product Status: known_affected Remediations Mitigation Swann Communications has provided the following interim security measures. For more information, contact Swann Communications https://support.swann.com/hc/en-us/requests/new. Mitigation Keep the camera behind a secured router and firewall. Mitigation Avoid exposing RTSP services to the internet through port forwarding, DMZ configurations, or direct public IP access. Mitigation Ensure the router and associated accounts use strong, unique passwords. Mitigation Keep device firmware updated when new releases become available. Additional Metrics Relevant CWE: CWE-306 Missing Authentication for Critical Function CVSS Version Base Score Base Severity Vector String 3.1 6.2 MEDIUM CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N 4.0 5.9 MEDIUM CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N View CVE Details CVE-2026-107606 SWIFI-SE2KIC firmware versions 2.0.22 and prior are vulnerable to a Missing Authentication for Critical Function vulnerability that could allow an attacker on the local network to retrieve a snapshot of the live feed without authentication. Read More 2 Affected Products Swann Communications SWIFI-SE2KIC firmware: <=2.0.22 Product Status: known_affected Remediations Mitigation Swann Communications has provided the following interim security measures. For more information, contact Swann Communications https://support.swann.com/hc/en-us/requests/new. Mitigation Keep the camera behind a secured router and firewall. Mitigation Avoid exposing RTSP services to the internet through port forwarding, DMZ configurations, or direct public IP access. Mitigation Ensure the router and associated accounts use strong, unique passwords. Mitigation Keep device firmware updated when new releases become available. Swann Communications SWIFI-SE2KIC firmware: <=2.0.22 Product Status: known_affected Remediations Mitigation Swann Communications has provided the following interim security measures. For more information, contact Swann Communications https://support.swann.com/hc/en-us/requests/new. Mitigation Keep the camera behind a secured router and firewall. Mitigation Avoid exposing RTSP services to the internet through port forwarding, DMZ configurations, or direct public IP access. Mitigation Ensure the router and associated accounts use strong, unique passwords. Mitigation Keep device firmware updated when new releases become available. Additional Metrics Relevant CWE: CWE-306 Missing Authentication for Critical Function CVSS Version Base Score Base Severity Vector String 3.1 6.2 MEDIUM CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N 4.0 6.9 MEDIUM CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N View CVE Details CVE-2026-107607 SWIFI-SE2KIC firmware versions 2.0.22 and prior are vulnerable to a Missing Authentication for Critical Function vulnerability that could allow an attacker on the local network to access a real-time video stream without authentication. Read More 3 Affected Products Swann Communications SWIFI-SE2KIC firmware: <=2.0.22 Product Status: known_affected Remediations Mitigation Swann Communications has provided the following interim security measures. For more information, contact Swann Communications https://support.swann.com/hc/en-us/requests/new. Mitigation Keep the camera behind a secured router and firewall. Mitigation Avoid exposing RTSP services to the internet through port forwarding, DMZ configurations, or direct public IP access. Mitigation Ensure the router and associated accounts use strong, unique passwords. Mitigation Keep device firmware updated when new releases become available. Swann Communications SWIFI-SE2KIC firmware: <=2.0.22 Product Status: known_affected Remediations Mitigation Swann Communications has provided the following interim security measures. For more information, contact Swann Communications https://support.swann.com/hc/en-us/requests/new. Mitigation Keep the camera behind a secured router and firewall. Mitigation Avoid exposing RTSP services to the internet through port forwarding, DMZ configurations, or direct public IP access. Mitigation Ensure the router and associated accounts use strong, unique passwords. Mitigation Keep device firmware updated when new releases become available. Swann Communications SWIFI-SE2KIC firmware: <=2.0.22 Product Status: known_affected Remediations Mitigation Swann Communications has provided the following interim security measures. For more information, contact Swann Communications https://support.swann.com/hc/en-us/requests/new. Mitigation Keep the camera behind a secured router and firewall. Mitigation Avoid exposing RTSP services to the internet through port forwarding, DMZ configurations, or direct public IP access. Mitigation Ensure the router and associated accounts use strong, unique passwords. Mitigation Keep device firmware updated when new releases become available. Additional Metrics Relevant CWE: CWE-306 Missing Authentication for Critical Function CVSS Version Base Score Base Severity Vector String 3.1 6.2 MEDIUM CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N 4.0 6.9 MEDIUM CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N View CVE Details Acknowledgments Elliott Phillips reported these vulnerabilities to CISA. Legal Notice and Terms of Use This product is provided subject to this Notification (https://www.cisa.gov/notification) and this Privacy & Use policy (https://www.cisa.gov/privacy-policy). Recommended Practices CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities. Minimize network exposure for all control system devices and/or systems, ensuring they are not accessible from the internet. Locate control system networks and remote devices behind firewalls and isolating them from business networks. When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize VPN is only as secure as the connected devices. CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures. CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov/ics. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies. CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets. Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov/ics in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies. Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents. CISA also recommends users take the following measures to protect themselves from social engineering attacks: Do not click web links or open attachments in unsolicited email messages. Refer to Recognizing and Avoiding Email Scams for more information on avoiding email scams. Refer to Avoiding Social Engineering and Phishing Attacks for more information on social engineering attacks. No known public exploitation specifically targeting these vulnerabilities has been reported to CISA at this time. These vulnerabilities are not exploitable remotely. Revision History Initial Release Date: 2026-10-13 Date Revision Summary 2026-10-13 1 Initial Publication Legal Notice and Terms of Use

Impact

Swann Communications SWIFI-SE2KIC firmware versions <=2.0.22

Exploitation Status

No active exploitation has been reported at this time. However, organizations should still apply patches promptly as proof-of-concept code may exist.

Timeline

Disclosed on October 2023

Remediation

Keep the camera behind a secured router and firewall; avoid exposing RTSP services to the internet through port forwarding, DMZ configurations, or direct public IP access; ensure the router and associated accounts use strong, unique passwords; keep device firmware updated when new releases become available.

Additional Information

This threat intelligence is aggregated from trusted cybersecurity sources. For the most up-to-date information, technical details, and official vendor guidance, please refer to the original article linked below.

Related Topics: This incident relates to Phishing, CVE, Exploit, and 2 more.

Read Original Article

Related Coverage

You gave your AI agent access, but who is giving it orders?

BleepingComputer

AI agents, designed to assist users, can be manipulated by attackers to perform harmful actions such as stealing data or deleting files. This exploitation occurs through common methods like malicious emails, websites, and plugins that trick the AI into executing unauthorized commands. Gen Digital has introduced its Agent Trust Hub, which aims to enhance the security of these AI agents by verifying their skills, ensuring secure connections, and implementing runtime controls to stop harmful actions before they can cause damage. This incident raises concerns about the security of AI tools, as they operate with legitimate permissions that can be abused if not properly safeguarded. Users and companies need to be vigilant about the commands they give to AI agents and the potential risks involved.

Oct 23, 2026

Hackers Breach Enterprise Firewalls and VPNs, Exposing Over 70,000 Credentials

The Hacker News

Cybersecurity researchers have revealed a significant breach involving exposed network edge devices, particularly targeting Fortinet FortiGate and Palo Alto Networks GlobalProtect firewalls. The attackers gained access to over 70,000 user credentials from various organizations around the world. This ongoing campaign aims not only to exploit these devices but also to further compromise the networks of affected victims. Such incidents highlight the vulnerabilities that can arise from improperly secured network devices, urging companies to reassess their security measures. Organizations using these firewall products should take immediate action to secure their systems and protect sensitive information.

Oct 23, 2026

HPE patches eight max severity RCE and auth bypass AOS flaws

BleepingComputer

Hewlett Packard Enterprise (HPE) has addressed a significant security issue by releasing updates for 72 vulnerabilities in the Aruba Operating System (ArubaOS). Among these, eight vulnerabilities are classified as maximum severity, including critical flaws that allow for authentication bypass and remote code execution. These vulnerabilities could potentially allow attackers to gain unauthorized access to systems running ArubaOS. Companies using this operating system should prioritize applying the patches to safeguard their networks. The swift action by HPE is crucial, as unaddressed vulnerabilities can lead to severe security breaches and data loss.

Oct 23, 2026

PHP Warns of Another Unpatched RCE Two Days After Emergency PHP2Shell Patches

The Hacker News

PHP has issued a warning about a new unpatched remote code execution vulnerability, identified as CVE-2026-115560, just two days after releasing emergency fixes for the PHP2Shell security flaws. This new issue specifically impacts web applications that are configured in an atypical manner, which PHP considers to be a low-risk scenario. However, the PHP team has opted not to release an emergency patch for this vulnerability. Instead, they recommend disabling a specific feature to mitigate potential risks. Even though the threat may seem limited, it raises concerns for web developers relying on PHP, as any configuration oversight could expose their applications to exploitation.

Oct 23, 2026

Critical Flaw in Python’s Popular Pillow Image Library Allows Code Execution via a Crafted Image

The Hacker News

A serious vulnerability has been discovered in Pillow, the most popular image processing library for Python, allowing attackers to execute arbitrary operating system commands on servers. The flaw, identified as CVE-2026-112900, arises from how Pillow processes EPS (Encapsulated PostScript) images. When Pillow opens these images, it passes the file name to Ghostscript without proper validation, which can be exploited by malicious users. This issue could potentially impact any application or server that uses Pillow to handle EPS images, making it a significant risk for developers and companies relying on this library for image processing. Users are urged to take immediate action to protect their systems from potential exploitation.

Oct 23, 2026

Researchers Demonstrate Node2Shell RCE Exploit on Node.js Build Using Crafted Brotli Data

The Hacker News

Researchers from Imperva have discovered a vulnerability in Node.js that allows attackers to execute arbitrary code through malicious Brotli data. This exploit, known as 'Node2Shell', was tested successfully on the official Node.js version 24.22.0 for Linux arm64 without any custom modifications. The flaw, identified as CVE-2026-111497, arises from the way the Brotli decoder processes crafted input. This means that applications using this official build could be at risk if they process untrusted Brotli data. It's crucial for developers and companies using Node.js to be aware of this vulnerability to safeguard their applications and users.

Oct 23, 2026