Authentication Bypass Vulnerabilities in Swann SWIFI-SE2KIC Firmware

Swann Communications SWIFI-SE2KIC security cameras running firmware version 2.0.22 and earlier are susceptible to multiple vulnerabilities categorized as CWE-306, Missing Authentication for Critical Function. These flaws (CVE-2026-107605, CVE-2026-107606, and CVE-2026-107607) enable an attacker with access to the local network to bypass authentication mechanisms entirely. Consequently, unauthorized parties can retrieve live video feeds, real-time streams, or snapshots from the device. These vulnerabilities represent a significant privacy risk for commercial facilities where these cameras are deployed. Because these devices are often connected to internal network segments without strict ingress filtering, this lack of authentication exposes sensitive visual data to any compromised or unauthorized device sharing the same local network.

Impact

The impact of these vulnerabilities is high regarding confidentiality, as unauthenticated parties can observe live activity within the monitored environment. While the vulnerabilities are limited to local network access (AV:L), successful exploitation results in complete exposure of the video output. There is no evidence of remote exploitation; however, the persistent nature of the vulnerability in firmware versions 2.0.22 and prior affects a global user base.

Recommendation

• Isolate all Swann SWIFI-SE2KIC cameras behind a secure, segmented router or firewall to prevent unauthorized access from untrusted devices on the internal network.
• Disable all external exposure of device management interfaces and RTSP services by removing any existing port forwarding, DMZ, or direct public IP configurations.
• Ensure the router managing the network segment for these devices uses strong, unique administrative passwords.
• Monitor for firmware updates from Swann Communications and apply them immediately to remediate these vulnerabilities.
• Audit internal network traffic for unexpected attempts to access camera web or RTSP services (typically on standard RTSP ports) from unauthorized IP addresses.