Vulnerability affects over 80 different camera models
Today some associates at Sec Consult found 2 different back doors in SONY IP Cameras. Sony
has responded, but be sure to update your firmware on all your cameras immediately. This is
a severe vulnerability that can lead to takeover of the camera and then access to your network.
„SEC Consult has found a backdoor in Sony IPELA Engine IP Cameras, mainly used professionally by enterprises and authorities. This backdoor allows an attacker to run arbitrary code on the affected IP cameras. An attacker can use cameras to take a foothold in a network and launch further attacks, disrupt camera functionality, send manipulated images/video, add cameras into a Mirai-like botnet or to just simply spy on you. This vulnerability affects 80 different Sony camera models. Sony was informed by SEC Consult about the vulnerability and has since released updated firmware for the affected models”

Detailed info:
http://blog.sec-consult.com/
https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20161206-0_Sony_IPELA_Engine_IP_Cameras_Backdoors_v10.txt
https://krebsonsecurity.com/2016/12/researchers-find-fresh-fodder-for-iot-attack-cannons/

Since 2012, Eagle Eye Networks has provided smart cloud surveillance solutions, leveraging AI to drive natural language search, automation, and more. Eagle Eye’s camera-agnostic approach heightens security while saving money, time, and resources.
Andere Beiträge, die Sie interessieren könnten
Log4j Security Update
On Friday, Dec. 10, 2021 the Apache Software Foundation disclosed a critical vulnerability (CVE-2021-44228) in its “Log4j” software. The disclosure has received extensive news coverage because of the ubiquity of…
Dezember 13, 2021
Die Gefahren des direkten Anschlusses von Kameras an das Internet
Dean Drako Dean Drako ist der Gründer und CEO von Eagle Eye Networks, dem weltweit führenden Anbieter von Cloud-Videosicherheit. Eagle Eye Networks rangiert auf Platz 133 der Technology Fast 500-Liste…
März 18, 2020
Macy’s Hit in Cyber Data Breach
Macy's and Bloomingdales join a long list of retailers hit with cyber breaches this year, including Adidas, Under Armour, Forever21, Saks Fifth Avenue and Lord & Taylor. In a notice…
August 3, 2018
