CERT-UA has released a notification regarding unapproved remote entry into video surveillance apparatus produced by Dahua.
The State Special Communications Service of Ukraine (SSSCIP) reported that instances of compromising IP cameras and DVRs have been documented.
These compromises involve gaining access to the video stream, altering the device's configuration, and establishing accounts belonging to external parties.
This vulnerability stems from weaknesses in the P2P access mechanisms and authentication protocols associated with the devices.
The warning specifically addresses the risk of unauthorized remote access across Dahua's range of surveillance equipment.
This incident underscores ongoing concerns within the infrastructure sector regarding the security posture of deployed IoT hardware.
Market participants must address these authentication and access control deficiencies to mitigate potential operational risks.
