Swann Communications SWIFI-SE2KIC
MonitorCVSS 6.2ICS-CERT ICSA-26-286-02Oct 13, 2026
Attack path
Attack VectorLocal
Auth RequiredNone
ComplexityLow
User InteractionNone needed
Summary
Successful exploitation of these vulnerabilities could allow an attacker to view video information without authentication.
What this means
What could happen
Device can be accessed without any credentials
Who's at risk
Organizations in critical infrastructure using affected equipment
How it could be exploited
Attacker would need local or console access to the device without any credentials. The attack is straightforward with no special conditions
Exploitability
Unlikely to be exploited — EPSS score 0.2%
Affected products (1)
ProductAffected VersionsFix Status
SWIFI-SE2KIC firmware≤ 2.0.22No fix yet
Remediation & Mitigation
0/5
Do now — compensating controls
0/2WORKAROUNDKeep the camera behind a secured router and firewall.
WORKAROUNDEnsure the router and associated accounts use strong, unique passwords.
Long-term hardening
0/3Swann Communications has provided the following interim security measures. For more information, contact Swann Communications
Avoid exposing RTSP services to the internet through port forwarding, DMZ configurations, or direct public IP access.
Keep device firmware updated when new releases become available.
↑↓ Navigate · Esc Close
API:
/api/v1/advisories/abb2f87d-1c7c-4e8d-b92c-1e5483172517Get OTPulse briefings by email
Advisory breakdowns and incident analyses for the people actually defending OT environments. Sent when there's something worth your attention, not on a schedule. Free, no account required.