Malwarecritical
Webcams and DVRs Vulnerable to HiatusRAT, FBI Warns
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2017-7921 | Improper Authentication Bypass in Multiple Hikvision Products | 9.8 | 100% | KEVPoC | KEV |
| CVE-2018-9995 | TBK DVR4104 and DVR4216 devices, as well as Novo, CeNova, QSee, Pulnix, XVR 5 in 1, Securus, Night OWL, DVR Login, HVR Login, and MDVR Login, which run… | 9.8 | 82% | PoC ×4 | |
| CVE-2020-25078 | Unauthenticated Admin Password Disclosure in D-Link DCS-2530L/2670L Cameras | 7.5 | 98% | KEV | KEV |
| CVE-2021-33044 | Authentication Bypass in Dahua IP Camera Firmware | 9.8 | 100% | KEVPoC ×2 | KEV |
| CVE-2021-36260 | Unauthenticated Command Injection in Hikvision Device Web Server | 9.8 | 100% | KEVPoC ×3 | KEV |
From the original article
2 min read at infosecurity-magazine.com
The FBI has issued a warning that Hiatus remote access trojan (RAT) malware has been observed targeting Chinese-branded web cameras and DVRs. Specifically, the actors have targeted Xiongmai and Hikvision devices with telnet access. The FBI has urged limiting the use of such devices and isolating them from the networks.
By Beth Maundrill · infosecurity-magazine.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.