Hikvison hacked - back door access exposed

[thewireguys 3]

Doesn't matter if you change your admin password.

 

http://seclists.org/fulldisclosure/2017/Sep/23

 

Many Hikvision IP cameras contain a backdoor that allows unauthenticated impersonation of any configured user account.

The vulnerability has been present in Hikvision products since at least 2014. In addition to Hikvision-branded devices,

it affects many white-labeled camera products sold under a variety of brand names. Hundreds of thousands of vulnerable

devices are still exposed to the Internet at the time of publishing. In addition to gaining full administrative access,

the vulnerability can be used to retrieve plain-text passwords for all configured users.

[ssmith10pn 0]

" title="Applause" /> " title="Applause" />