Dangerous flaw in Hikvision cameras in Vietnam

Nearly 80 lines of Hikvision cameras and recorders have serious errors and are at risk of being attacked, including many products circulating in Vietnam.

Vulnerability CVE-2021-36260 was announced by Hikvision on September 19 and is rated at 9.8/10 - one of the most severe levels ever appearing on an IP camera product.

Citing assessments from security experts, the Information Security Department - Ministry of Information and Communications said that the vulnerability could affect more than 100 million devices globally, including Vietnam.

The Chinese camera company also admitted that the vulnerability exists in 78 product lines, including IP cameras (network surveillance cameras) and recorders. The company has released a patch and recommends users update immediately to limit the risk of being exploited.

According to the Department of Information Security, IP cameras are being used quite commonly by agencies and businesses. So the vulnerability has a sizable impact, which can pose a risk to critical infrastructure. The National Cyber ​​Security Monitoring Center (NCSC) believes that the exploit code will soon be publicly available on the Internet in the near future.

If exploited, hackers can perform remote code execution attacks without authentication, thereby taking full control of the device. According to Security Week, an attacker can access a port on a server without a username or password. The system also does not record this access history. In addition, the camera can also be exploited to attack the target user's internal network if connected to the network.

The Department of Information Security recommends that individual users and organizations and businesses need to check, review and identify systems that are using or connected to Hikvision's IP camera equipment. "If used, it is necessary to update the firmware, separate the network band used for the camera and restrict access to other network bands," the Department announced.

Hikvision was established in 2001 in Zhejiang (China). According to market research firm IHS Markit, by 2020, Hikvision is the world's largest surveillance camera company, accounting for 38% of the global market share. Its products focus on AI technology, serving the construction of smart cities.

Hikvision has been present in the Vietnamese market for many years, providing a variety of product lines for video surveillance, including security cameras, traffic cameras, thermal cameras, and storage recorders. , alarm systems, doorbells with screens... In which, the most popular models are priced from 600,000 to 1.2 million VND. Not only popular in families, these products are also installed in many businesses and constructions in Vietnam.