Critical Security Alert: Two Major Vulnerabilities Found in Hisilicon PTZ Cameras – Immediate Action Required!

GreyNoise cybersecurity researchers have identified two critical vulnerabilities in Hisilicon Hi3516A V600-based PTZ cameras.

These vulnerabilities allow cybercriminals to hijack cameras, monitor and modify video streams.

These vulnerabilities, known as CVE-2024-8956 and CVE-2024-8957, affect cameras used in many different environments, from industrial facilities to healthcare facilities.

SIGNIFICANT HEALTH EFFECTS

These vulnerabilities could allow hackers to gain full control of cameras, monitor and manipulate video streams, disable camera functions, or even introduce devices into a botnet.

This situation poses a serious threat to both personal privacy and corporate security.

Folders are being published, but…

These vulnerabilities affect cameras made by manufacturers such as PTZOptics, Multicam Systems SAS, and SMTAV Corporation.

PTZOptics released a security update on September 17, but not all devices were patched as some models were reaching the end of their life.

Models like PT20X-SE-NDI-G3 and PT30X-SE-NDI-G3 are still waiting for a solution.

The affected cameras are used in a variety of environments, including business facilities, business conferences, healthcare facilities, courtrooms and houses of worship. Therefore, the security vulnerability situation is very important.

SAFETY RULES

CCTV camera users are advised to take the following steps to protect against security vulnerabilities in their devices:

Regularly check the camera manufacturer’s website for security updates and update your devices to the latest software version.

Use strong passwords and change default passwords.

Protect your cameras with a firewall and close unnecessary ports.

Regularly scan your devices for vulnerabilities.