Breaking News

New revelation about Hikvision’s surveillance camera case has a security hole

Saturday, September 25, 2021 20:10 PM (GMT+7)

Regarding the case of Hikvision’s surveillance cameras containing security holes, on June 25, this unit had updated information.

According to Hikvision, on June 23, they were contacted by a security expert, named Watchful IP, who reported a potential vulnerability inside Hikvision cameras. After confirming the vulnerability, Hikvision proactively worked directly with experts to release patches and confirmed to have reduced the risk of this vulnerability.

Then, on September 18, Hikvision posted a notice about this security hole and released the latest firmware update, advising customers to update their devices to ensure safety. So far, Hikvision insists that it has not recorded any public evidence or any malicious use of the security hole.

The security flaw of Hikvision cameras can affect more than 100 million devices globally, including Vietnam.

Sharing more about the incident, Mr. Cong Tien Lam – Technical Director of Hikvision Vietnam said that Hikvision applied common practices in the global industry when handling this incident. He affirmed, this vulnerability is not the so-called “back door”, and Hikvision products also do not have “backdoor”.

To ensure the security of the surveillance camera system, Hikvision recommends that individuals and organizations using Hikvision products check whether their devices are on the affected list, and update the firmware version. latest to limit the risk of being affected by this vulnerability. Currently, the latest firmware version is available on Hikvision homepage and official importer websites in Vietnam.

However, Hikvision does not disclose the camera models as well as the number of cameras that are likely to be affected, and the possible consequences of this vulnerability if users do not update the firmware.

Previously, on September 23, the Department of Information Security under the Ministry of Information and Communications (TT&TT) had warned to send information technology (IT) units to ministerial-level agencies and the Government about the vulnerability. in Hikvision IP cameras. This vulnerability is estimated to affect more than 100 million devices globally, including Vietnam.

According to experts, vulnerability CVE-2021-36260 in Hikvision camera allows attackers to execute code remotely without authentication, thereby gaining full control of the device, through which access and attack the internal network of the agency or organization. Currently, IP cameras are widely used by agencies, organizations and businesses.

Hikvision was established in 2001. According to market research firm IHS Markit, by 2020, Hikvision is the world’s largest surveillance camera company, accounting for 38% of the global market share. Not only popular in families, these products are also installed in many businesses and constructions in Vietnam.


Warning about the risk of network attacks from serious vulnerabilities of Hikvision cameras

On September 23, the Department of Information Security, Ministry of Information and Communications (TT&TT) issued a warning to the unit in charge of information technology…


Leave a Reply

Your email address will not be published. Required fields are marked *