Search criteria
2 vulnerabilities found for KM-IP521 by KMW
CVE-2026-5386 (GCVE-0-2026-5386)
Vulnerability from nvd – Published: 2026-05-29 16:25 – Updated: 2026-05-29 16:25
VLAI
Title
KMW CCTV Security Cameras Unverified Password Change
Summary
The affected KMW CCTV Security Cameras are vulnerable to a critical unauthenticated password reset. This flaw allows an attacker to remotely reset the administrator password to a known value without authentication, granting full access to the camera feeds and settings.
Severity
9.1 (Critical)
CWE
- CWE-620 - Unverified Password Change
Assigner
References
Impacted products
Date Public
2026-05-28 16:21
Credits
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "KM-IP521",
"vendor": "KMW",
"versions": [
{
"status": "affected",
"version": "4.04.91.230307"
}
]
},
{
"defaultStatus": "unaffected",
"product": "KM-IP421",
"vendor": "KMW",
"versions": [
{
"status": "affected",
"version": "4.04.53.210416"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Souvik Kandar reported this vulnerability to CISA."
}
],
"datePublic": "2026-05-28T16:21:00.000Z",
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "The affected\u0026nbsp;KMW CCTV Security Cameras are\u0026nbsp;vulnerable to a critical unauthenticated password reset. This flaw allows an attacker to remotely reset the administrator password to a known value without authentication, granting full access to the camera feeds and settings."
}
],
"value": "The affected\u00a0KMW CCTV Security Cameras are\u00a0vulnerable to a critical unauthenticated password reset. This flaw allows an attacker to remotely reset the administrator password to a known value without authentication, granting full access to the camera feeds and settings."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-620",
"description": "CWE-620 Unverified Password Change",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-05-29T16:25:17.079Z",
"orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"shortName": "icscert"
},
"references": [
{
"url": "https://main.kmw.ro/pub/Firmware/521_421.zip"
},
{
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-148-06"
},
{
"url": "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-148-06.json"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cspan\u003eKMW has issued a firmware update to address this vulnerability. The firmware update can be found at:\u0026nbsp;\u003c/span\u003e\u003cbr\u003e\u003cdiv\u003e\u003ca href=\"https://main.kmw.ro/pub/Firmware/521_421.zip\"\u003ehttps://main.kmw.ro/pub/Firmware/521_421.zip\u003c/a\u003e\u003c/div\u003e\u003cdiv\u003e\u003cspan\u003e\u003cbr\u003e\u003c/span\u003e\u003c/div\u003e\u003cdiv\u003e\u003cspan\u003eKM-IP421 - will lose the cloud authorization after this update so users will need to contact customer support to re-authorize the P2P connection.\u003c/span\u003e\u003c/div\u003e\u003cdiv\u003e\u003cspan\u003e\u003cbr\u003e\u003c/span\u003e\u003c/div\u003e\u003cdiv\u003e\n\u003cspan\u003eIf there are any issues customers are encouraged to contact KMW directly.\u003c/span\u003e\u003c/div\u003e"
}
],
"value": "KMW has issued a firmware update to address this vulnerability. The firmware update can be found at:\u00a0\n https://main.kmw.ro/pub/Firmware/521_421.zip \n\n\n\n\nKM-IP421 - will lose the cloud authorization after this update so users will need to contact customer support to re-authorize the P2P connection.\n\n\n\n\n\nIf there are any issues customers are encouraged to contact KMW directly."
}
],
"source": {
"advisory": "ICSA-26-148-06",
"discovery": "EXTERNAL"
},
"title": "KMW CCTV Security Cameras Unverified Password Change",
"workarounds": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cspan\u003eKMW recommends connecting surveillance equipment on a separate network, allow only specific devices access to the internet, check for firmware updates regularly, and use cloud connections responsibly.\u003c/span\u003e"
}
],
"value": "KMW recommends connecting surveillance equipment on a separate network, allow only specific devices access to the internet, check for firmware updates regularly, and use cloud connections responsibly."
}
],
"x_generator": {
"engine": "Vulnogram 1.0.2"
}
}
},
"cveMetadata": {
"assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"assignerShortName": "icscert",
"cveId": "CVE-2026-5386",
"datePublished": "2026-05-29T16:25:17.079Z",
"dateReserved": "2026-04-01T20:46:32.932Z",
"dateUpdated": "2026-05-29T16:25:17.079Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-5386 (GCVE-0-2026-5386)
Vulnerability from cvelistv5 – Published: 2026-05-29 16:25 – Updated: 2026-05-29 16:25
VLAI
Title
KMW CCTV Security Cameras Unverified Password Change
Summary
The affected KMW CCTV Security Cameras are vulnerable to a critical unauthenticated password reset. This flaw allows an attacker to remotely reset the administrator password to a known value without authentication, granting full access to the camera feeds and settings.
Severity
9.1 (Critical)
CWE
- CWE-620 - Unverified Password Change
Assigner
References
Impacted products
Date Public
2026-05-28 16:21
Credits
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "KM-IP521",
"vendor": "KMW",
"versions": [
{
"status": "affected",
"version": "4.04.91.230307"
}
]
},
{
"defaultStatus": "unaffected",
"product": "KM-IP421",
"vendor": "KMW",
"versions": [
{
"status": "affected",
"version": "4.04.53.210416"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Souvik Kandar reported this vulnerability to CISA."
}
],
"datePublic": "2026-05-28T16:21:00.000Z",
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "The affected\u0026nbsp;KMW CCTV Security Cameras are\u0026nbsp;vulnerable to a critical unauthenticated password reset. This flaw allows an attacker to remotely reset the administrator password to a known value without authentication, granting full access to the camera feeds and settings."
}
],
"value": "The affected\u00a0KMW CCTV Security Cameras are\u00a0vulnerable to a critical unauthenticated password reset. This flaw allows an attacker to remotely reset the administrator password to a known value without authentication, granting full access to the camera feeds and settings."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-620",
"description": "CWE-620 Unverified Password Change",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-05-29T16:25:17.079Z",
"orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"shortName": "icscert"
},
"references": [
{
"url": "https://main.kmw.ro/pub/Firmware/521_421.zip"
},
{
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-148-06"
},
{
"url": "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-148-06.json"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cspan\u003eKMW has issued a firmware update to address this vulnerability. The firmware update can be found at:\u0026nbsp;\u003c/span\u003e\u003cbr\u003e\u003cdiv\u003e\u003ca href=\"https://main.kmw.ro/pub/Firmware/521_421.zip\"\u003ehttps://main.kmw.ro/pub/Firmware/521_421.zip\u003c/a\u003e\u003c/div\u003e\u003cdiv\u003e\u003cspan\u003e\u003cbr\u003e\u003c/span\u003e\u003c/div\u003e\u003cdiv\u003e\u003cspan\u003eKM-IP421 - will lose the cloud authorization after this update so users will need to contact customer support to re-authorize the P2P connection.\u003c/span\u003e\u003c/div\u003e\u003cdiv\u003e\u003cspan\u003e\u003cbr\u003e\u003c/span\u003e\u003c/div\u003e\u003cdiv\u003e\n\u003cspan\u003eIf there are any issues customers are encouraged to contact KMW directly.\u003c/span\u003e\u003c/div\u003e"
}
],
"value": "KMW has issued a firmware update to address this vulnerability. The firmware update can be found at:\u00a0\n https://main.kmw.ro/pub/Firmware/521_421.zip \n\n\n\n\nKM-IP421 - will lose the cloud authorization after this update so users will need to contact customer support to re-authorize the P2P connection.\n\n\n\n\n\nIf there are any issues customers are encouraged to contact KMW directly."
}
],
"source": {
"advisory": "ICSA-26-148-06",
"discovery": "EXTERNAL"
},
"title": "KMW CCTV Security Cameras Unverified Password Change",
"workarounds": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cspan\u003eKMW recommends connecting surveillance equipment on a separate network, allow only specific devices access to the internet, check for firmware updates regularly, and use cloud connections responsibly.\u003c/span\u003e"
}
],
"value": "KMW recommends connecting surveillance equipment on a separate network, allow only specific devices access to the internet, check for firmware updates regularly, and use cloud connections responsibly."
}
],
"x_generator": {
"engine": "Vulnogram 1.0.2"
}
}
},
"cveMetadata": {
"assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"assignerShortName": "icscert",
"cveId": "CVE-2026-5386",
"datePublished": "2026-05-29T16:25:17.079Z",
"dateReserved": "2026-04-01T20:46:32.932Z",
"dateUpdated": "2026-05-29T16:25:17.079Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}