#SECURITYSPY MAC AMCREST 720P#
#SECURITYSPY MAC AMCREST UPGRADE#
#SECURITYSPY MAC AMCREST SOFTWARE#

#SECURITYSPY MAC AMCREST UPGRADE#

This can be applied manually by logging into the device’s UI, checking firmware versions and accessing Setup > System > Upgrade (you’ll find detailed instructions here). On that basis, the firmware version offered on Amcrest’s website, V2.520.AC00.18.R, is the one to look for. However, anyone who didn’t log in during this period would presumably not receive that notification.Īccording to Synopsis, all firmware versions (models 721S, 721W, 721B) for up to and including V2.420.AC00.16.R are vulnerable.

#SECURITYSPY MAC AMCREST SOFTWARE#

Reportedly, Amcrest made software patching the flaws some months ago, which would have been offered to owners when they next logged in. This, too, could affect other Amcrest IP cameras, allowing devices to be remotely hijacked. The second is a problem in a stack overflow flaw affecting the camera’s Open Network Video Interface Forum (ONVIF) specification. Worryingly:īased on cursory analysis of other Amcrest products, this might be prevalent in all the Amcrest IP cameras and also other Amcrest products. The first allows an unauthenticated attacker to discover the camera’s admin credentials stored in clear text, facilitating a takeover of the device and, presumably including locking legitimate users out of the UI. Two of these – CVE-2017-8229 and CVE2017-13719 – earn a CVSS score of 9.8 and 10 respectively, which means they are critical issues. We weren’t able to track down an advisory from Amcrest, but Synopsys posted outlines of each on Bugtraq. The flawsĪccording to Threatpost, which spoke to the Synopsys researcher who uncovered the flaws, there are six vulnerabilities, now identified as CVE-2017-8226, CVE-2017-8227, CVE-2017-8228, CVE-2017-8229, CVE-2017-8230 and CVE-2017-13719. There are really three issues in play here – the nature and severity of the flaws, how users should go about updating the firmware to secure their cameras, and why it’s taken until 2019 for owners to hear about them. Ideally, these cameras need to be identified and patched as soon as possible. Those cameras are out there, an unknown number of which are in a vulnerable state that an attacker might identify using the Shodan search engine if they are configured to be accessible via the internet. The 721 family has since been superseded by newer designs, which doesn’t, of course, mean that the many thousands of people who bought the product will stop using it just because a researcher has turned up security issues. This week, we learned that the camera had another less welcome characteristic in the form of six security flaws discovered back in 2017 by a researcher at security outfit Synopsys.

#SECURITYSPY MAC AMCREST 720P#

Launched around 2015, it offers 720p HD quality, two-way audio, the ability to pan and tilt, night vision, rounded off with four hours of cloud storage for your video footage at no extra cost. Looking at the spec sheet, it’s not hard to understand why someone in search of an affordable but well-specified home security camera would choose the wireless IPM-721 series from US company Amcrest.

Securityspy mac amcrest