Webcam Security Snafus Expose 15,000 Devices

guest · Sep 17, 2019

Webcam Security Snafus Expose 15,000 Devices
September 17, 2019
https://www.infosecurity-magazine.com/news/webcam-security-snafus-expose/

Researchers have discovered 15,000 private webcams around the globe which could be accessed by anyone with an internet connection, raising serious security and privacy concerns.
Working for Wizcase, white hat Avishai Efrat located the exposed devices from multiple manufacturers including: AXIS net cameras; Cisco Linksys webcam; IP Camera Logo Server; IP WebCam; IQ Invision web camera; Mega-Pixel IP Camera; Mobotix; WebCamXP 5 and Yawcam.

The problem lies with the cameras’ remote access functionality. In some cases UPnP was enabled without additional protections like password authentication or IP/MAC address whitelisting, whilst in others unsecured P2P networking was used.

“Web cameras manufacturers strive to use technologies which make the device installation as seamless as possible but this sometimes results in open ports with no authentication mechanism set up. [...]” explained Wizcase web security expert, Chase Williams.
Wizcase urged webcam operators to change the default configuration of their device in order to: whitelist specific IP & MAC addresses to access the web camera, add strong password authentication and disable UPnP if P2P networking is being used.
Click to expand...

Log in or Sign up

Webcam Security Snafus Expose 15,000 Devices

guest Guest

Log in or Sign up

Webcam Security Snafus Expose 15,000 Devices

guest Guest

Useful Searches