Kenik Camera Management Panel Path Traversal Vulnerability

A path traversal vulnerability has been identified in the Kenik Camera Management Panel, specifically in several camera models including the KG-5230TAS-IL-3, KG-5230TAS-IL-G3, KG-5230DAS-IL-G3, KG-5260TZAS-IL-3, KG-5260DZAS-IL-3, KG-5260TZAS-IL-G3, KG-5260DZAS-IL-G3, and KG-5260xxxx-IL-(G)2. This vulnerability allows an unauthenticated attacker to send a GET request with an arbitrary file path, enabling access to corresponding files on the server. All versions prior to 2025-04-21 are affected, except for the KG-5260xxxx-IL-(G)2 cameras, which were fixed in version 2026-04-23.

Impact

Exploitation of this vulnerability allows for unauthorized access to files on the server, potentially leading to the disclosure of sensitive information.

Remediation

Users can update to version 2026-04-23 for KG-5260xxxx-IL-(G)2 cameras or version 2025-04-21 for other affected models.