ICSA-26-148-06
·
Published 2026-05-28
·
View on CISA ICS-CERT ↗
KMW CCTV Security Cameras
CVSS 9.1
CRITICAL
Risk Summary
Successful exploitation of this vulnerability may grant full unauthorized access to camera feeds and settings.
CVEs (1)
Remediations
- KMW has issued a firmware update to address this vulnerability. The firmware update can be found at https://main.kmw.ro/pub/Firmware/521_421.zip.
- KM-IP421 - will lose the cloud authorization after this update so users will need to contact customer support to re-authorize the P2P connection.
- KMW recommends connecting surveillance equipment on a separate network, allow only specific devices access to the internet, check for firmware updates regularly, and use cloud connections responsibly.
- If there are any issues customers are encouraged to contact KMW directly.
Affected Vendors
KMW
Affected Products (2)
KMW
·
KM-IP521
IPCAM_V4.04.91.230307
KMW
·
KM-IP421
IPCAM_V4.04.53.210416
Affected Sectors
Commercial Facilities, Government Services and Facilities, Critical Manufacturing, Financial Services, Transportation Systems
Get alerted to advisories like this
OTWarden monitors CISA, BSI, Siemens, Rockwell and more — and emails you within 2 hours when your vendors are affected.
Start free trial Learn more