Ukraine’s CERT-UA warns that attackers are gaining access to Dahua IP cameras through the Easy4IP P2P service, which lets owners view video remotely without network configuration. The attackers exploit predictable device serial numbers and older authentication bypass flaws, CVE-2021-33044 and CVE-2021-33045. CERT-UA recommends disabling the P2P feature, updating firmware and removing unknown user accounts.

What it means: Security cameras are among the most neglected devices in any business: a technician installs them once, connects them to the internet so the owner can watch on a phone, and they are rarely updated. P2P services such as Easy4IP are convenient because they need no router configuration, but they expose the device to anyone who can guess or find its serial number. The flaws being used have been known since 2021, which shows that many devices have never been updated. In the context of the war, compromised cameras in Ukraine can reveal information about movements and infrastructure, but the same risk applies to shops, offices and warehouses everywhere. In Greece, Dahua and similar cameras are widely used by small businesses and households. Owners should ask their installer to check the firmware version, disable P2P where it is not needed, change default passwords and remove unknown accounts. For remote viewing a VPN connection is a safer choice, and cameras should sit on a separate network from office computers.

Read the original on The Hacker News

Related service: Custom software

Related stories