Thursday, July 20, 2017

The vulnerability in the library gSOAP affect CCTV hackers to control the camera.


The research team of the company Senrio report to the vulnerability of the library gSOAP used in CCTV many. When sending data that stimulate the bug will make the program in the camera body crack and the shellcode properly can control the camera. And reset all settings to control the camera through the web.

The Senrio inform the Axis and after checked and found that there is affected by this vulnerability 249 Version (the president in M3004 research test version. Single version) is now the Axis out patches here and let customers updated firmware by Axis inform the Genivia developer gSOAP . The Senrio believe this vulnerability could affect other software, including footage from other suppliers. By now, Axis is coordinating inform other manufacturers in the group. ONVIF to update patch.

No comments:

Post a Comment