Exploit network-level vulnerabilities in Hikvision intercom products like a pro!

  <img alt="post featured image" src="https://skylightcyber.comhttps://skylightcyber.com/2023/09/14/neighbourhood-watch%e2%80%93hikvision-intercom-eavesdropping/thumbnail.jpg" />
  <h1><a href="https://skylightcyber.com/#TL-DR" rel="noreferrer" target="_blank" title="TL;DR"></a>TL;DR</h1><p>Hikvision intercom products are vulnerable to several network-level attacks due to ineffective command parsing logic and lack of message-level authentication. Combining a few of these vulnerabilities allows an attacker to gain administrative access to a device in the same network, commonly a building, and covertly open the microphone.</p>

Introduction

Have you ever answered your ringing intercom and thought, “I wonder …

devices eavesdropping exploit hacked hikvision intercom network physical physical security pro products security thought vulnerabilities watch yes