Intelbras cameras allow unauthenticated firmware updates that cause DoS
A local Wi-Fi attacker can keep cameras offline by repeatedly posting to an unauthenticated upgrade endpoint; firmware R.260804 requires authentication.
1
Stories per day · 30 days
1 RSS
Relatedauthentication-bypass2dahua2easy4ip2p2p2authentication1cert-ua1denial-of-service1firmware1intelbras1ukraine1
6 stories, newest first · one card per story
Stories tagged #ip-cameras
CERT-UA: attackers control Dahua cameras and recorders via Easy4IP
Devices with Easy4IP dial out to Dahua’s cloud and can be opened by serial number without a public IP or open ports.
CERT-UA warns Dahua cameras in Ukraine hijacked via P2P and auth flaws
Attackers guess Easy4IP serial numbers and use weak passwords or CVE-2021-33044 and CVE-2021-33045 on outdated firmware.
1
Only 13% of OT Network Segments Are Fully Isolated: Analysis
Forescout finds only 13% of OT-containing network segments are fully isolated across 209 organizations.
Network Segmentation Failures Are Expanding the Corporate Attack Surface
Forescout finds nearly half of OT and medical segments also hold IT or IoT, widening lateral movement.
1
Hackers Compromised 14,500+ Dahua Devices Using Credential Attacks, Auth Bypasses, and P2P
Hunt.io disclosed Operation CameraSwarm, compromising 14,500+ Dahua cameras via credential attacks, auth bypass CVEs, and P2P relay techniques across Ukraine and Russia.
4