Kenik Camera management Panel is vulnerable to Path Traversal vulnerability. An unauthenticated attacker can send GET request with arbitrary file path and read corresponding files located on the server.
The issue was fixed in version 2026-04-23 of the KG-5260xxxx-IL-(G)2 cameras.
Rest of the products were fixed in version 2025-04-21.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
KG-5230TAS-IL-3
Vendor
Kenik
Product
KG-5230TAS-IL-3
Platforms
Unknown
Default status
unaffected
KG-5230TAS-IL-3 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
date
2025-04-21
Unavailable
None listed
KG-5230TAS-IL-G3
Vendor
Kenik
Product
KG-5230TAS-IL-G3
Platforms
Unknown
Default status
unaffected
KG-5230TAS-IL-G3 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
date
2025-04-21
Unavailable
None listed
KG-5230DAS-IL-G3
Vendor
Kenik
Product
KG-5230DAS-IL-G3
Platforms
Unknown
Default status
unaffected
KG-5230DAS-IL-G3 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
date
2025-04-21
Unavailable
None listed
KG-5260TZAS-IL-3
Vendor
Kenik
Product
KG-5260TZAS-IL-3
Platforms
Unknown
Default status
unaffected
KG-5260TZAS-IL-3 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
date
2025-04-21
Unavailable
None listed
KG-5260DZAS-IL-3
Vendor
Kenik
Product
KG-5260DZAS-IL-3
Platforms
Unknown
Default status
unaffected
KG-5260DZAS-IL-3 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
date
2025-04-21
Unavailable
None listed
KG-5260TZAS-IL-G3
Vendor
Kenik
Product
KG-5260TZAS-IL-G3
Platforms
Unknown
Default status
unaffected
KG-5260TZAS-IL-G3 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
date
2025-04-21
Unavailable
None listed
KG-5260DZAS-IL-G3
Vendor
Kenik
Product
KG-5260DZAS-IL-G3
Platforms
Unknown
Default status
unaffected
KG-5260DZAS-IL-G3 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
date
2025-04-21
Unavailable
None listed
KG-5260xxxx-IL-(G)2
Vendor
Kenik
Product
KG-5260xxxx-IL-(G)2
Platforms
Unknown
Default status
unaffected
KG-5260xxxx-IL-(G)2 · Scoped product and version facts