Amazon’s Blink Smart Security Cameras Open to Hijack

guest · Dec 10, 2019

Amazon’s Blink Smart Security Cameras Open to Hijack
December 10, 2019
https://threatpost.com/amazon-blink-smart-camera-flaws/150962/

Multiple high-severity vulnerabilities have been discovered in Amazon-owned Blink XT2 security camera systems, which if exploited could give attackers complete control over them.

The flaws could enable attackers without access to the devices to view camera footage, listen to audio output and hijack the device for use in a botnet, Tenable researchers disclosed on Tuesday. Amazon has been notified of the flaws and is rolling out patches.

“Connected devices, like Blink cameras, are everywhere. Precisely for that reason, cybercriminals are focused on compromising them,” said Renaud Deraison, co-founder and CTO with Tenable, in a statement.
Overall, seven CVEs were disclosed in Blink. The most serious vulnerability is a command injection flaw stemming from the sync module update (CVE-2019-3984), which exists in Blink’s cloud communication endpoints for providing updates to devices or obtaining network information.
Click to expand...

Log in or Sign up

Amazon’s Blink Smart Security Cameras Open to Hijack

guest Guest

Log in or Sign up

Amazon’s Blink Smart Security Cameras Open to Hijack

guest Guest

Useful Searches