Saturday 27 October 2018, Poradnik bezpieczeństwa

A safety gap in NUOO industrial cameras

Lost24

The safety experts from Tenable have discovered a safety gap in the NUOO Network Video Recorder camera software, owing to which the cyber criminals can, with the assistance of zero-day exploit devices, follow video recording and thus manipulate their content.

The discovered gap is "Peekaboo" which has been found in the CCTV industrial television system management software which enables viewing and modifying the material and stealing data.

The problem is serious in a sense that NUUO is one of the best in the video surveillance industry and its products have been implemented in over 100 hundred thousand installations all over the world. What is more, as the DI puts it, many companies are not aware that their surveillance systems are using NUUO software. Taking the above into consideration, there may be from 180 to 800 thousand CCTV cameras in use.

The gap is a serious threat since the cyber criminals, by using the root access, may interrupt video transmission or interfere with its content.