IoT home security camera allows hackers to listen in over HTTP

guest · Jul 31, 2019

IoT home security camera allows hackers to listen in over HTTP
Unauthenticated, remote snooping is possible over the Internet
July 31, 2019
https://www.zdnet.com/article/iot-home-security-camera-allows-hackers-to-listen-in-over-http/

This week, researchers from cybersecurity firm Tenable said the Amcrest IP2M-841B IP camera, available on Amazon and subject to 12,000 customer reviews -- many of which are positive -- contained a serious bug which is "trivial" to exploit.

However, in a Medium blog post, researchers say a glaring issue has been missed -- the possibility of eavesdropping on a user's audio streams.
The vulnerability, now assigned as CVE-2019–3948, was found after an examination of the device's firmware.

"The Amcrest IP2M-841B IP camera firmware version V2.520.AC00.18.R does not require authentication to access the HTTP endpoint /videotalk," the vulnerability's description reads. "An unauthenticated, remote person can connect to this endpoint and listen to the audio the camera is capturing."
Click to expand...

Log in or Sign up

IoT home security camera allows hackers to listen in over HTTP

guest Guest

Log in or Sign up

IoT home security camera allows hackers to listen in over HTTP

guest Guest

Useful Searches