Kg 5260Dzas Il 3
Monthly
Arbitrary file read in the Kenik IP camera management panel lets an unauthenticated attacker on the adjacent network retrieve any file on the device by supplying a crafted path in a single GET request. The flaw (CWE-22 path traversal) affects multiple Kenik KG-5230/KG-5260 series cameras and was coordinated by CERT-PL; there is no public exploit identified at time of analysis and EPSS exploitation probability is negligible (0.04%). Vendor firmware fixes are available, so the practical priority is patching exposed camera fleets rather than treating this as an internet-wide emergency.
Arbitrary file read in the Kenik IP camera management panel lets an unauthenticated attacker on the adjacent network retrieve any file on the device by supplying a crafted path in a single GET request. The flaw (CWE-22 path traversal) affects multiple Kenik KG-5230/KG-5260 series cameras and was coordinated by CERT-PL; there is no public exploit identified at time of analysis and EPSS exploitation probability is negligible (0.04%). Vendor firmware fixes are available, so the practical priority is patching exposed camera fleets rather than treating this as an internet-wide emergency.