D-Link Cloud Camera Flaw Gives Hackers Access to Video Stream

guest · May 2, 2019

D-Link Cloud Camera Flaw Gives Hackers Access to Video Stream
Researchers warn customers to reconsider the use of the camera’s remote access feature
May 2, 2019
https://threatpost.com/d-link-cloud-camera-flaw/144304/

D-Link has only partially patched critical flaws affecting its consumer WiFi camera, which allow hackers to intercept and view recorded video. They also allow attackers to manipulate the device’s firmware, according to security researchers. The camera in question is D-Link’s DCS-2132L cloud camera, popular with consumers and sold at big-box retailers and online.

The most serious of the vulnerabilities is one that creates conditions that are optimum for a man-in-the-middle (MitM) attack, according to ESET researchers who discovered the bugs late last year.
The problem is tied to the lack of encryption in the transmission of the video stream between the camera and D-Link’s cloud service, and also from the cloud to the user’s client-side viewing app, researchers explained, in a Thursday report outlining the flaw..
Click to expand...

guest · Jul 8, 2019

Who is watching whom with that D-Link security camera?
July 8, 2019
https://blog.avira.com/who-is-watching-whom-with-that-d-link-security-camera/

Security cameras for babies should help parents to relax by giving them an extra eye onto their little one’s activities. But unencrypted video streams and security issues to Man-in-the-Middle attacks in a popular D-Link camera are enough to keep a parent up at night.
Taking a deep look at a D-Link baby camera
The IoT Research Lab at Avira recently looked at the D-Link HD Wi-Fi Baby Camera DCS 855L and assessed the device and its network communication from a security perspective.
We found two significant issues:

Weak authentication mechanism for the device set up. An attacker acting as a man-in-the-middle (MITM) agent can get access to the device credentials and subsequently control the device.

Unencrypted video and audio streaming. An intruder can easily capture the audio and video streams from the device and spy on whatever the monitored children are doing.

Click to expand...

Report (PDF): https://blog.avira.com/wp-content/uploads/2019/07/Dlink-DCs.pdf

Log in or Sign up

D-Link Cloud Camera Flaw Gives Hackers Access to Video Stream

guest Guest

guest Guest

Log in or Sign up

D-Link Cloud Camera Flaw Gives Hackers Access to Video Stream

guest Guest

guest Guest

Useful Searches