Risky Bulletin: Slovakia finds Russian backdoor in traffic speed cameras
Slovakia's NBU found an SMS-triggered backdoor in Russian-made NERO R-ONE traffic cameras, pausing a 279-unit deployment.
Slovakia's national security service NBU issued an alert against NERO R-ONE high-speed traffic cameras after finding a backdoor that grants shell and network access via SMS from hardcoded Russian phone numbers. The cameras are a rebranded version of the Russian CORDON PRO.M model by St. Petersburg firm Semicon, purchased via a Cyprus shell company under a €30 million EU-funded project. The report also found SecureBoot disabled, vulnerable web management, and unauthenticated live streams; the Interior Ministry paused deployment of 279 cameras pending independent assessment.
- Backdoor grants shell access via SMS from hardcoded Russian numbers
- Cameras are rebranded CORDON PRO.M by Semicon (St. Petersburg)
- €30 million EU-funded project; 279 cameras planned
- SecureBoot disabled; web portal and streams also flawed
- Deployment paused pending independent audit
- Products
- NERO R-ONECORDON PRO.M
- Victims
- Slovakia Interior Ministry
- Organizations
- NBURisky BusinessSocket SecurityPortSwigger
From the original article
13 min read at news.risky.biz
In other news: French cops used public exploit to hack EncroChat; Microsoft delays Exchange updates due to influx of AI bugs; ransomware affiliate poses as a data recovery firm.
By Catalin Cimpanu · news.risky.biz
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.