About 80 Sony IP cameras are alleged to come with backdoor to help hackers spy on its users.
Security researchers at SEC Consult has claimed that Sony purposely added the backdoors, “maybe as a way to debug the device during development or factory functional testing.”
Researchers at the firm discovered two different flaws in the tested Sony IP cameras.
First, a flaw which affects the web interface. The flaw allows hackers to attack the camera using a Telnet service. Another flaw found by the researchers can let attackers gain root control of the camera and spy on users.
The security firm has already informed Sony about the flaws discovered. In response, Sony has reportedly released a patch to fix the vulnerability.
SEC Consult has recommended Sony and Sony customers to conduct a thorough security review of the affected products. “It is essential to restrict access to IP cameras using VLANs, firewalls etc, as the risk of being a botnet victim (e.g. Mirai) is high,” according to the security report.
