Kaspersky Lab noted similar vulnerabilities in traffic

[tanjimajuha20]

Kaspersky Lab expert Vladimir Dashchenko has discovered that hundreds of speed cameras on Russian roads are vulnerable and accessible via the Internet. He conducted the research on his own initiative after receiving a fine from one of these cameras.

The editorial staff of Vesti.net checked this information and confirmed that access to the video stream from cameras in various regions, including the Tula and Ivanovo regions, as well as the Moscow region, is possible without passwords or special skills.

Dashchenko explained that thailand whatsapp resource the video interface of the cameras can be monitored without authorization. Some cameras allow interaction with the device, which may include changing settings, turning off the power or video stream. The coordinates of the cameras can be found using default settings, which are available in open documentation on the Internet. In addition, the cameras have public IP addresses, which makes them easy to find through search engines.

Specialized search engines that scan IP addresses on the Internet find out which devices are connected and how to interact with them. According to Dashchenko, the publicly accessible devices that have been discovered are only a small part of the thousands that could be in the thousands. The problem affects not only Russia, but also neighboring Belarus and the Middle East. Notably, home cameras are sometimes better protected because they are behind network routers and do not have static IP addresses.

cameras eight years ago, indicating a systemic security problem in the Internet of Things. Protections exist, but they need to be properly implemented and configured to avoid such vulnerabilities.

The customer's technical specifications may not contain clear requirements for allocating devices to separate subnets or creating a virtual private network (VPN) required for monitoring and configuration. However, Dashchenko noted, various well-known practices can be implemented to ensure device security. In particular, such measures as access by certificates or restricting access to certain ranges of IP addresses are applicable.