Backdoor Accounts Found in 80 Sony IP Security Camera Models (pcworld.com)

Posted by msmash on Wednesday December 7, 2016 @05:20AM from the security-woes dept.

Many network security cameras made by Sony could be taken over by hackers and infected with botnet malware if their firmware is not updated to the latest version. Researchers from SEC Consult have found two backdoor accounts that exist in 80 models of professional Sony security cameras, mainly used by companies and government agencies given their high price, PCWorld reports. From the article: One set of hard-coded credentials is in the Web interface and allows a remote attacker to send requests that would enable the Telnet service on the camera, the SEC Consult researchers said in an advisory Tuesday. The second hard-coded password is for the root account that could be used to take full control of the camera over Telnet. The researchers established that the password is static based on its cryptographic hash and, while they haven't actually cracked it, they believe it's only a matter of time until someone does. Sony released a patch to the affected camera models last week.

1 of 55 comments (clear)

Min score:

Reason:

Sort:

Not just Sony by product_bucket · 2016-12-07 06:00 · Score: 3, Informative

Lots of the big name security brands are running the same basic NetSurveillance WEB firmware underneath their skinned interface. I'm thinking particularly of the brand that makes flight data recorders... and cordless doorbells. I wonder if people would pay serious money for a IPTV network if they knew it's just a re-badged Mirai host.
How do I know? They hit me 24/7, I'll be worried about the connectivity of the internet if they ever stop.