Which Dvrs Would You Like To See Cyber Security Tested?

We've (Pen Test Partners) done quite a bit of work on DVRs and IP cameras (as well as intruder alarm and signalling systems) over the last few years, finding and documenting a significant number of vulnerabilities.

We want to look at more DVRs. At the moment, we have:

  • A Yale home system
  • A QVIS/A-data home system
  • A Samsing mid-range system
  • A Honeywell mid-range system
  • A pile of cheap eBay systsm

We want to look at more systems to find more issues. What DVRs would you like us to look at?

Anything we find will go through co-ordinated disclosure with the vendor.

Thanks!

Login to read this IPVM discussion.
Why do I need to log in?
IPVM conducts unique testing and research funded by member's payments enabling us to offer the most independent, accurate and in-depth information.

******, ****** *** ******* / ******!

**** ****'* ***********, ***** ** ***** ** *** ********** / professional ******, ** ***** ** *********, *****, ********* ***** *** Exacq ********** ***** ***** ********* ******** *** **** *********** ****** interest.

** *** *** ****** ** **** ** ****** ** *** mainstream ***** / *****, *'* ********* ******* ** *********.

**** *** ****** **** ***** **** ******* ** **** *** QVIS **, ** ***** ****** ** ** *** ******** *******.

********** ***** *** *********

* ***** *** * ***** **** ** *** ***** ******** tested ** **** ************* ** ***** *** * *** ** Dahua *** ********* ******** ** *** *** **** *** ***** had * ******** ******.

***** ******** ** **** *** *******.

**** ******* **** ** *** ******* ***'* ******* ***** ********, and ***'* ***** ******** ********** ** ** ******* ***.

****** ******* ** *** ******* ** ******** *****, ****** **** vulnerable ********* ** ** ** ****** ** ******...

********* *** *** ***** **** **** ** ******** ** ********. ftp://ftp.hikvision.com/ **** *** ***** *** ** ****** ** ***** ******* of ******** ** *** * ****** ** ******* ** * VMS ** * **** **** ** ********.

***** ** *** ***** **** **** **** * **** ***** and ****** ** **** **** **** **** ****** *** **** only ******* ******** ******** *** * **** ** ***. * have ********** *** ***** *** ****** *** *** ****** ******** is ***** ***.

*** ****** * ******* **** ** ** **** ** *** devices **** *** ********* ** *** ********* ***** ******* *** firmware *** ***** *** ******* ** ********* ** ***** ******** of **** ** *** ********.