Chinese surveillance cameras on sale
28. August 2022Chinese surveillance cameras on sale
Washington, Aug. 28, 2022
Hackers are selling access to Chinese-made surveillance cameras used by thousands of people worldwide. Threat actors are exploring a security flaw discovered last year.
The surveillance cameras are made by Hikvision, short for Hangzhou Hikvision Digital Technology. Although the FCC has designated the company as a national security risk, the cameras continue to be purchased by U.S. customers.
The vulnerability used by the hackers is known as CVE-2021-36260, a command injection vulnerability in the cameras‘ web server. This flaw has a CVSS score of 9.8, making it a critical security risk for all involved parties.
