fscool

Hello. This is a great forum and I have managed to pick up a lot of tips here. I have a question about NVRs using port 8000 and also the whole Smartphone remote access feature in general. I have a Swann NVR8-7300 8 Channel NVR. It uses device port 8000 which I believe to be the norm for many systems over the past couple of years. It also automatically uses UPnP and by default activates Smartphone access, not to mention HTTP access (I have already changed the http port and setup port forwarding to secure that a little more). Anyway, this whole smartphone remote access has me kind of freaked out because the documentation doesn't talk about much to do with security and in particular barely anything about smartphones remotely accessing your system. I don't know if the stream is somehow encrypted, how user id's and passwords are transmitted and basically if port 8000 is wide open in such a way that somebody could easily gain access to my NVR and see my video. I've used canyouseeme.org and found that it can see port 8000. So.....what does this all mean? 8000 is a fairly common port to use and for hackers to port scan for. Does this imply that people can get into my NVR? How do I know that they cannot? Swann doesn't have much to say about it. I've thought about changing the default port from 8000 to something else and using another Port Forward. I really don't want to have to disable UPnP on my router because that just creates all sorts of hassles (my router is not impacted by the UPnP exploit). Can anybody set my mind at ease here?

Thank you for your reply. Sadly, there are no precious metals in this place. I think that my concerns here are mostly just an extension of working in the IT industry. Any time a device opens a port through a firewall to allow remote access, I naturally would like to learn more about how the manufacturer and software developer are working to ensure that the device and its software as well as the remote access software are properly locked down. Based on the materials that came with it and searches on the net, I was sort of disappointed to find not a lot of info available. My port forwards appear to be working though so that is good. In retrospect I probably should have dug a little further into this before I bought this thing. I can always give their tech support a call too. In the end, I can always just setup VPN and that should help. Thanks again.