Firmware Updates Released for Security Camera Dumpster Fire

[Faybert]

Firmware updates are available for a wide range of security flaws that are bound to cause a lot of problems on the IoT landscape.

The vulnerabilities affect Geutebrück-made IP-based security cameras, but the researchers who uncovered the flaws suspect the same vulnerable firmware might have been used for IP cameras sold by other vendors such as Ganz, Cap, Visualint, THRIVE Intelligence, and UDP Technology.

This is only speculation because researchers were able to confirm that the flaws affect Geutebrück G-Cam/EFD-2250 and Topline TopFD-2125 IP cameras only.
....
....

All flaws are critical-level, easy to exploit, and dangerous
Security researchers find security bugs in routers, IP cameras, and other smart devices on a regular basis these days, but the Industrial Control Systems Cyber Emergency Response Team (ICS-CERT) has decided to issue an alert detailing these flaws due to their severity. All vulnerabilities have high severity scores ranging from 8.3 to 9.8 (out of a maximum of 10).

ICS-CERT experts who reviewed the original findings —by security researchers Davy Douhine of RandoriSec and Nicolas Mattiocco of Greenlock— say these flaws are remotely exploitable via the Internet and require a low skill level from the attacker to exploit.
....
....