Description
The affected KMW CCTV Security Cameras are vulnerable to a critical unauthenticated password reset. This flaw allows an attacker to remotely reset the administrator password to a known value without authentication, granting full access to the camera feeds and settings.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
KMW KM-IP521
Default version status: unaffected
4.04.91.230307affected
KMW KM-IP421
Default version status: unaffected
4.04.53.210416affected