Critical Video Surveillance Camera Vulnerability Allows Attackers to Change Passwords & Disable Alarms

Pablo Martínez, a member of the Red Team at cybersecurity firm Entelgy Innotec Security, has uncovered significant vulnerabilities in low-cost video surveillance cameras available for purchase on popular online platforms.  His findings shed light on serious security concerns surrounding these budget-friendly devices. Martínez’s investigation revealed a critical vulnerability that allows users to reset their passwords while bypassing essential security checks.  Document FREE Demo Deploy Advanced AI-Powered Email Security Solution Implementing AI-Powered Email security solutions “Trustifi” can secure your business from today’s most dangerous email threats, such as Email Tracking, Blocking, Modifying, Phishing, Account Take Over, Business Email Compromise, Malware & Ransomware Free Demo This flaw opens the door for unauthorized individuals to change the camera’s password, gain access to admin-level privileges, disable alarms, delete stored images, and even view the camera’s live stream.  The vulnerability is associated with a QR Captcha that users scan through a mobile app to confirm their password recovery, making it a crucial entry point for attackers.

Source: GBHackers

 


Date:

Categorie(s):