Description
The affected KMW CCTV Security Cameras are vulnerable to a critical unauthenticated password reset. This flaw allows an attacker to remotely reset the administrator password to a known value without authentication, granting full access to the camera feeds and settings.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| KMW | KM-IP521 | 4.04.91.230307 | — |
| KMW | KM-IP421 | 4.04.53.210416 | — |
Advisories 1
- ICSA-26-148-06 KMW CCTV Security Cameras CISA ICS & IT advisories · May 28, 2026