Dahua Suffers Second Major Vulnerability, Silent [Finally Acknowledges]

Author: Brian Karas, Published on Jul 25, 2017

Less than 3 months ago, Dahua received DHS ICS-CERT's worst score of 10.0 for their backdoor.

Now, Dahua has received another 10.0 score for a new vulnerability. Despite that, Dahua has remained silent.

In this note, we examine the vulnerability, Dahua's poor handling of this, compared to competitors Axis and Hikvision, and the potential impact to Dahua.

[Update: After the publication of our report, Dahua has finally acknowledged the vulnerability]

**** **** * ****** ***,***** ******** *** ***-****'* ***** ***** ** **.**** ***** ********.

***, ***** *** ******** ******* **.* ***** *** * *** vulnerability. ******* ****, ***** *** ******** ******.

** **** ****, ** ******* *** *************, *****'* **** ******** of ****, ******** ** *********** **** *** *********, *** *** potential ****** ** *****.

[******: ***** *** *********** ** *** ******, ***** *** ******* acknowledged *** *************]

[***************]

Vulnerability ********

*****'* *** ********* ** ********** ** ***** ****** ********, ********* ** ****, ********* ** *** ** ***. ************, the ***** ***** *** *** ***** ********, ** *** **** first **** *** *** **** ********** ** *** ******, **** not ******** ***** **** ******. **** *** ** **** ** an ******** ** ****** *********** **** **** ** *** ******** field, *** ******* * ****** ******** ** *** ****** **** that ********* *** *****.

****** ********* *** ** ********* ** ***** ** ******** ** disable *** ******, **** **** ******, ** ********* ********** *** unit. ******* **** ************* ****** ** *** ***** **** ******, no ************** ** ******** ** ******* **, *** *** ****** with ****** ****** ** ** **** ** *******.

*** ****** **** **** ***** *** ******** ****** * ****** ago, ** *** *** ** ***.

Models ********

***** ***** ** ****** **** *** ******** *** **** ***** has ******** * ******** ***, *********:

*******, ** ** *** ***** *** **** ***** ****** *** impacted. *** *******,***** **** **********, **** ****** *****, ** ******* *******, **** ***** *******, part ******* *** ******* *** *** **** *********** ********. ********, as *** ***** **** *** ***** ********, ***** ***** ****** code ****** ******* *****, **** ***** ****** ***** ** ********.

No ********** / ** ******

***** *** **** ** ******** ********** *** ****** ** **** disclosure, ***** ** ******** ** ***** ******* ** ** ******* below *** *****'* ***********.

**** *** ******* *** ** ******** ******** ** ***** *** has ******** ** **-***-****** ******** ***** **** ****** *************

Fix **********

*** *** **** ************* ****** ******** * **** ** ******** on *****'* ************* **** **** ***** *** *** *************. *** that ****, *** **** ** *****'* ************* ***** *** ****, returning *** ******:

******: ***** ** *****, *** **** / ***** *** *** active.******** ******** ** *** *** ************* ****.

*****'* ***** ******* ******* ** **********, *** *** ** ********* to **** *************, *** **** ************* ****** ***** **** ***** 2017:

**** *** ******** ************* ******* **** **********, ** ** **** listed ** ****** ******* ***** ***** *** **** ****** ********.

Researcher **********

*** **** ******* *********** *****, ** ***** ******** ************ ************, *** **** ******** (** ****/*********** *****) **** *** ********* of *** *************. ******** ************ ******* ** ******* ********** ******* of *** *************.

Violates ******** *********

*** **********, **** ** *** **** *** ********* **** ******* vulnerabilities:

*********'* ******* ************** ***** ********** ***** **** ****** *************, *** ***** ** firmware *******:

**** ******** ******* ** ***** ***************, *** ***** ** ********, on ************ ************:

**** ** ***** ******** ** *****'* **** ** ***************, **** of ********, *** ** *** **** ** **** ***********, **** of **** ********** ********.

******

*** ******* ** **** ***** ********* ** **** ** ********* poor ***** ******, **** **** ******* *************** *** **** ******* to ******** ****** *** ****** ***** *********. ** **** ***, we ** *** *** **** ********* ***** **** *****, ** some *****, **** ** ******** ** ***** *** *****. *******, it **** **** *** ********* ** ********* ***** ** ** acknowledge *************** **********, *** ******* ******** **** ********* *** *****.

Vote / ****

******

****** **** ****:***** *** *** ****** * ***** ********* *** ******* ************* *** *************, ****** ** **** ******* 4 ** ***** ****** *** **** * ******** ******* ** not *** *********:

***** *** ******** ** ***** **** *** **** *** ****, this *** *** **** ** ***** ******* ***** *** ****. The ************* *** ****** ******** ** **** **** **** *** the **** ****** **** ***** *** ******** ** *** **.

***** ** ***** ** ******** ** ****** ** *** ***** International ******* ***** ******* ** ***** ******** *******.

Comments (34)

John Honovich

IPVM | 07/25/17 06:29am

***** ** *** **** ******* **** *** ******** ****** ** the ****** **** ***** ** **.

**** ** * ******* **** ****** ~$* ******* ** ****** revenue, **,*** ** ** ********* *** ********** ***** ** ** even *** ****** *****.

***** ****** **** *** ******* ****** ******* ***** ** ******* they ****** **** *** *********** ********** ** ******* ******* **.

Undisclosed Integrator #1

07/25/17 01:30pm

* ***** *** ******* ******* ** **** *** *** ******** poor ** ** *** ********** ******** ********.

* ***** *** **** ***** ** ** - **** ** you ***** ** ***** ******** *** ********?

Undisclosed Distributor #3

In reply to Undisclosed Integrator #1 | 07/25/17 02:16pm

******: "**** ** *** ***** **the ******* ** Dahua security and response?".

Thumbnail kubasketballlogo

Shannon Davis

TED Systems | 07/25/17 01:40pm

***'* **** ** ***** *** ****** ***** ** ** *************** found ** ** ******* *** ** *******. **** ** *** nature ** * ******** ***** ******* *** *** *** **** people *** ***** **** ** **** ***** *** ***** *********** harm. ******* *** *************** *** ********** ** *** ************ ** a ***** *** ****** *** **** ** **** ********** ** safe ** ********. *** **** ******** *** *** ********* ** a ************, *** * ***'* **** ***** *** ******, ** how **** ****** *** ********* *** *** **** **** ****** the *********. ************* **** ** **** ***** *** ***** **** their ** ** ***** *** ******* *** ********** **** **** of *** *****. ** ** **** ** **** ********* ******** want-to-be ********* *** ****** ***** *********, ** ******* ** ******** IP ****** ************. * ***** ********* *** ****** **** ** these ********* ***'* **** ** ******* ******* *** *********** ** due ** *** **** **** ****'* ******** *** ************* ********** and ***'* **** ***** **** ****'* ** **** ******** ******* and **** **** *** **** ***** **** *** ***************. ***'* face ** *** **** ******** *********, ** ** *** *** own **** ******* **** ***** *** *** *** ***.

John Honovich

IPVM | In reply to Shannon Davis | 07/25/17 06:45am

*******, * ***** **** *** ***** *** ********** ** ********** "******* *** **********".

*******, * **** ***** **** *************** ****** ** ********* ***** on *** *********** *** **** **** *** ** *******. **** Dahua, **** ** * *** **** ** *** *****. ***** recent *************** **** ** ** ***** ****** **** ******* ****** skill ** *******. **** ***** **** **** ********* ** **** as ****** ** **** *********** ******** **** *****'* ******** **** vulnerabilities **** *** ******* ** ******* ** **** ********* **.

Thumbnail vigilant v logo

Brian Hampton

IPVMU Certified | In reply to John Honovich | 07/26/17 05:21pm

****** ***** *** ** *********** *********. * ********* ** ***** about *** ******** ******** *** *** **** * ***** ** to *** ** ** **** ***** ******** * *** *** I *** ********** ******* ** *** * *** ******** ** do **. ** ***** *** ****** ***** ****** ** ***'* something **** ***** ** ****** ***** ********* ** ** **** average ******** ****.

John Honovich

IPVM | In reply to Brian Hampton | 07/27/17 12:20am

* ********* ** ***** ***** *** ******** ******** *** *** what * ***** ** ** *** ** ** **** ***** products * *** *** * *** ********** ******* ** *** I *** ******** ** ** **.

*****,**** ** *** ****** ** *** / ******* *** ***** backdoor. **'* ****** ** ****** *** **'* ***** ******** ******* to ***. **'* *** **** *** ** **** ** *********** on ******** ******** ****.

** ***'* ********* **** ***** ** ****** ***** ********* ** by **** ******* ******** ****

*** ******* *********, ** **** ****** ******, ***** ***** *** clearly ******** *********, ***** ****** **** ********* ** **.

Randy Lines

In reply to Shannon Davis | 07/26/17 04:06pm

***** ********. ******** ************** ** ***** ** * **** ***** mistake ** **** :(

***

Undisclosed Manufacturer #2

07/25/17 01:51pm

** **** ******** **** * **** **** ******* ** **** this ** ******* ** ***** **** *** ****** ***** *******, when ** ***** **** *** ***** ** ***** ** *** last **** *** * ****.

Thumbnail brk1

Brian Karas

IPVM | In reply to Undisclosed Manufacturer #2 | 07/25/17 07:08am

**** ** *****'* ****** ************* **** * **.* **** *****, and **** *** ****** *** **** ****. *** ******** ***, the***** *********** *********** **** ********, ** ** *** ********** **** ** exploit, ******** * ***** ****** ** *******, *** **** ******** sensitive **** (*********).

**** ******* ******** ********** ***** ***************, ***** ** **** ****** ** *********** ******* *********** ****.

Undisclosed #4

In reply to Brian Karas | 07/27/17 09:14am

...*** ***** ***** *** *** ***** ********, ** *** **** first **** *** *** **** ********** ** *** ******, **** not ******** ***** **** ******...

**** ** *****'* ****** ************* **** * **.* **** *****, and **** *** ****** *** **** ****. *** ******** ***, the ***** ********...

**** **** *** **** ** *** ***** *********...

John Honovich

IPVM | 07/25/17 09:00am

*****'* ****** ************* ****, ********* *** ******** *** ****, *** been **** ** ***** * ***** ***.

*** *** **** ***** *** ****** ** ** *** ******* it *** **** ************* ** ****** **** **** ** ****** find / ****** *** *****.

********** **** **** *** ** *** ** ** **** ** comprehend *** * ******** ****** ********** ******* ***** **** **** issues.

John Honovich

IPVM | In reply to John Honovich | 07/26/17 12:32am

******: ***** (** *****) ** *****, *** **** / ***** are *** ******.******** ******** ** *** *** ************* ****.

Undisclosed #4

07/25/17 04:25pm

****** ** ******* ****** *** ****** ******** ;)

Undisclosed Manufacturer #8

In reply to Undisclosed #4 | 07/27/17 03:36am

******. **'** ***** ******* ****** *** *** ********. *** ******!

Undisclosed Manufacturer #8

In reply to Undisclosed Manufacturer #8 | 07/27/17 03:38am

**** ********** - *'* *** ******** * ****** ********...

Robert Shih

SavvyTech Security | 07/25/17 06:29pm

** ***** ********** *** ********* ** ********, ** **** ** Sonia ******* **** *** ** **** ******** ** **** ******** chipset ******. *'** *** **** **** * *** *** ** in ** *** ****.

****, ** **** ** ***** ******* ** *** ******** *******, this ** *** ****** *** *** ********* (***** ** ******* in * ********* ********** ** *** ********)...

Undisclosed Integrator #5

In reply to Robert Shih | 07/25/17 10:21pm

*** **** *********** **** ********** *** ******** ******?

Robert Shih

SavvyTech Security | In reply to Undisclosed Integrator #5 | 07/25/17 10:26pm

***** ** *** ** *** *********, **** *** **** **** I've ****. *** * ************ ***** **** ** **'* *** the **** ******* ****** *** ** ****.

****, **** ******** ******* **** ******* ** ******** ****...***** *'** sold **** *-* ** ** * ***** ****? *****'* **** like **'** ****** *** **** ******** *******...** ***

Undisclosed End User #6

07/25/17 10:32pm

**** *** ******* ** **** ******* ********* *** *****, * would *** ** ********* ** *** **** ***** ** ****. I ***** *** **** *** ** **** *** ** **** is *** ****, ** ** *** **** ******* *** ** exploit *** ** *****, ** **** ** *** ** ********* FW ******* *** *** ** ****** **** *****. ******** **** that *** *********** **** ******* **** ******** ************* **** ** the ****** **** ***** ******.

John Honovich

IPVM | In reply to Undisclosed End User #6 | 07/26/17 01:21pm

**** *** ******* ** **** ******* ********* *** *****

#*, ******. *** *** ********* ** **** '*********' *** '*****' are *** *** **** ****** / ******?

Undisclosed End User #6

In reply to John Honovich | 07/26/17 05:13pm

**,

********* *** ***** ** *** *** **** ******** **** *****'* devices, ***** *** ********** ** **** (**** ** ****) *** naming ** *** ******** ******, ********* **** "*******" **** **** been ******* *** ******** ***.

**** **** ****** ** ****** *** ******, ****/***** ******, *****, RTSP, ***** *******... ***, ** ***** - **'* *** *** binary **** ****** ****** ********** ********* ********** ******** *** ********.

*** *********** ***** **, **** **** *** ***** **** ****** code *** *** ******** *** ********* "*******" ** ************ (***/****... or ********), *************** ***** ** *** ************/******* *** **** ****** to ***** ** *** ****** ** **** (*'**).

**** ** *** **** **** ******** ********, ** ********* * ***** *** ** ********* **** **** flaw ***** ** **** ********* *** *****, *** ** ************ exploited *** **** ****** **** (** *** *********/***** ******** **** as ****).

*******, ***** ***** ** * ********** ** *** **** **** for ******** - ***** *** **** **** *****, *** ***** exist ***** ********* *) ******, *) ***** ***** **** *** 3) ***, *** ** ***** ****** **** ***** ** ******** who ******* "***", *** **** ***** ****** **** *** ********** devices.

******, **** ***** **** * *** ** **** *** "*****" binary.

~ # ** ** | **** *****
*** **** ***:** /***/***/***** ****
*** **** *:** **** *****
~ #

~ # ******* -*** | **** *****
*** * * *.*.*.*:***** *.*.*.*:* ****** ***/*****
*** * * ***.*.*.*:**** *.*.*.*:* ****** ***/*****
*** * * ***.*.*.*:**** *.*.*.*:* ****** ***/*****
*** * * *.*.*.*:**** *.*.*.*:* ****** ***/*****
*** * * :::*** :::* ****** ***/*****
*** * * :::** :::* ****** ***/*****
*** * * :::***** :::* ****** ***/*****
*** * * :::***** :::* ****** ***/*****
*** * * :::*** :::* ****** ***/*****
*** * * *.*.*.*:***** *.*.*.*:* ***/*****
*** * * *.*.*.*:***** *.*.*.*:* ***/*****
*** * * ***.***.***.***:**** *.*.*.*:* ***/*****
*** * * *.*.*.*:**** *.*.*.*:* ***/*****
*** * * *.*.*.*:***** *.*.*.*:* ***/*****
*** * * *.*.*.*:***** *.*.*.*:* ***/*****
*** * * ***.***.*.**:***** *.*.*.*:* ***/*****
*** * * ***.***.***.***:***** *.*.*.*:* ***/*****
*** * * *.*.*.*:***** *.*.*.*:* ***/*****
*** * * ***.***.*.**:**** *.*.*.*:* ***/*****
*** * * ***.***.***.***:**** *.*.*.*:* ***/*****
*** * * *.*.*.*:**** *.*.*.*:* ***/*****
*** * * *.*.*.*:**** *.*.*.*:* ***/*****
*** * * ***.***.***.***:***** *.*.*.*:* ***/*****
**** * [ ] ***** *** ***/***** /***/***/**************-******
**** * [ ] ***** ***** ***/***** /***/***/************-*

John Honovich

IPVM | In reply to Undisclosed End User #6 | 07/26/17 05:52pm

******! **** *******.

***, ******** *******, ** *** ******** ****************:

***** (*** *****) *** ***** (*** ******/********) ** **** *** name ** * ****** **** **** ******** **** *** *** and *** ***/*********** ********* ** *** ***/***/***.

**** **** **** *********** ** *****. ** *** ***** ***** is * ***** ***** ** ******* *** ********? *** *** sense ** **** *** ******* **** **?

Undisclosed End User #6

In reply to John Honovich | 07/26/17 06:16pm

**** ***********, ***** **** **** ** ** **** *********, ***** and ***** ***** **** ****.

*** *** ** *** ******** ***** ** "*** ********" ********* Hikvision, *** - **** **** ** **** *** ****** **** provides **** ******** (***** *******), *** ** ******** ** **** Dahua *********/***** *** ********* *******, * **** *** ***** **** davinci ***** **** **** ** *********/***** - *** ****** *** quite **** ** ***** **** ********* **** **** ***, ** maybe **** **** ** *** **** ******* **** *** (*********** now, ** * **** *** ***** ** *** *** *** binary *** ******** *** ******** ******* - *** **** ***).

*** **** ** ****** **** * ********* ***.

# # ******* -***
****** ******** *********** (******* *** ***********)
***** ****-* ****-* ***** ******* ******* ******* ***** ***/******* ****
*** * * *.*.*.*:** *.*.*.*:* ****** ***/********
*** * * ***.*.*.*:***** *.*.*.*:* ****** ****/********
*** * *** ***.***.*.**:** ***.***.*.***:***** *********** ****/********
*** * * :::**** :::* ****** ***/*******
*** * * :::*** :::* ****** ***/*******
*** * * :::** :::* ****** ***/*******
*** * * :::** :::* ****** ***/********
*** * * ::*:***** :::* ****** ****/********
*** * * :::*** :::* ****** ***/*******
*** * * *.*.*.*:***** *.*.*.*:* ***/*******
*** * * *.*.*.*:**** *.*.*.*:* ***/*******
*** * * *.*.*.*:***** *.*.*.*:* ***/*******
*** * * *.*.*.*:**** *.*.*.*:* ***/*******
*** * * *.*.*.*:**** *.*.*.*:* ***/*******
*** * * :::*** :::* ***/*******
*** * * :::**** :::* ***/*******
*** * * :::***** :::* ***/*******
*** * * :::**** :::* ***/*******
*** * * :::***** :::* ***/*******
*** ***** * :::** :::* ** ***/*******

Kenny Johnson

07/26/17 01:20pm

** * ****** **** *** **** *** **** **** ********* or **** **** ** ** **** **** **** *************. *****?

****, **** **** ******* ******* *****? *** ****.

Thumbnail brk1

Brian Karas

IPVM | In reply to Kenny Johnson | 07/26/17 01:45pm

** * ****** **** *** **** *** **** **** ********* or **** **** ** ** **** **** **** *************. *****?

***, ** ***** ** ** ****** ****** ** *** *** interface ** *** **** **** *** ****** ** **** **** this ************* ***** ******** ********.

****, **** **** ******* ******* *****? *** ****.

Undisclosed Manufacturer #7

07/26/17 06:09pm

**** **** ****** ******* **** **** * ***** ************* ** your ******* *** ***** ** ** *****. ** ** ******** gains ****** **** ******* ******, **** **** *** *** **** vulnerability ** **** ****** ** *** *****, **** *******, ***.

***, ** ***'* ** ******** ** **** ******* *** ******** remotely **********, *** *** *******'* **** ****** **.

Thumbnail lataus

Heikki Peltomäki

07/27/17 12:02am

**'* *** ******** ** *** ** **** ******** ******. *** when *** *** ** *** ****** *** *********** *** ***'* give * **** ******* ** **** *********... **** **** ** just ***** *************. **** **** ***** *** ******, **** **** has ***** **** **** *** *********. ***** ***, **** ****, this *** ***** ****** ** ***** ************* ** * ***** period ** ****.

**** ******* * ***, **** ******* ***** *** ******* ***** help ********* **** ***** ******* **** ******, ** ***** ****** them * ******.

******* * ***** *** ** ********* ********** *****'* **** ** go ****.

*** *********.

John Honovich

IPVM | 07/27/17 12:08am

******:***** *** *** ****** * ***** ********* *** ******* ************* *** *************, ****** ** **** ******* 4 ** ***** ****** *** **** * ******** ******* ** not *** *********:

***** *** ******** ** ***** **** *** **** *** ****, this *** *** **** ** ***** ******* ***** *** ****.

***** ** ***** ** ******** ** ****** ** *** ***** International ******* ***** ******* ** ***** ******** *******.

Robert Shih

SavvyTech Security | In reply to John Honovich | 07/27/17 06:57pm

* ***** ****'* **** ******* *** ******** ******** ** ******* models. *** **** ****** *** ******** ***'* "*********" ** ******** because **** ****'* ******* ** **** ******* **** ***.

*** ****** ****** ** *** ***** ********* *** *** ***** complete/international **** *** **** **** *** *** ******** (******* **** the ******* *** ********* ** ** **********).

Thumbnail brk1

Brian Karas

IPVM | In reply to Robert Shih | 07/27/17 07:00pm

*** **** ****** *** ******** ***'* "*********" ** ******** ******* they ****'* ******* ** **** ******* **** ***.

*********** **** ************* *** *** **** ****** *** ** ****, Dahua ****** **** *** *** **** ******* ********* ** *** same ****, ** ****** * ***, ** *** *** *******.

Undisclosed End User #6

In reply to Brian Karas | 07/27/17 07:08pm

***, **** *** **** ***** *** ****, **?

*** **'* **** ****... **********!

Undisclosed Integrator #9

07/27/17 07:04pm

**, ** ** ***** *** * "*******" ******** ********... *** many ****** ***** ** **** ** **** ***** ** *** of ***** ****** ********* ** ***** *** *** ********???

***** *** ****** *** ********?

**** ***** **** ** *****...

Undisclosed End User #6

07/27/17 07:04pm

***** ****** * ****** ***** *** ******** **** ** ************* series **** *****, ** * ********** **** *** ***** ***** was *** **** ****** ************* ** ******** ************ ***** ******************.

Login to read this IPVM report.
Why do I need to log in?
IPVM conducts unique testing and research funded by member's payments enabling us to offer the most independent, accurate and in-depth information.

Related Reports

Avigilon CEO Attacks Asian Companies Cyber Insecurity on Aug 18, 2017
Avigilon CEO is taking aim at their Asian competitors. And he is going directly after these company's cyber security issues. In this note, we...
IP Networking Course September 2017 on Aug 17, 2017
This is the only networking course designed specifically for video surveillance professionals plus it includes live training, personal help and...
Hikvision Responds To Cracked Security Codes on Aug 15, 2017
Hikvision has responded to IPVM's report on Hikvision's security code being cracked, both with a 2 page update to dealers and communication...
Vulnerability Directory For Access Control Cards on Aug 14, 2017
Knowing which access credentials are insecure can be unclear, especially because most look and feel the same. Even the most insecure 125 kHz types...
Hikvision Security Code Cracked on Aug 08, 2017
Hikvision's 'security code' feature has been cracked and a program generating security codes is being distributed online. IPVM has obtained and...
US Army Bans Chinese DJI Drones on Aug 08, 2017
The US Army has issued a ban on Chinese-made DJI drones. A US Army memo obtained by sUAS News references a classified document from the Army...
Healthy Skepticism for Deep Learning Is Prudent on Jul 26, 2017
The hype for deep learning in video surveillance is accelerating. Between the race to the bottom and dearth of a 'next big thing', certainly pent...
Wireless Burglar Alarm Sensors Guide on Jul 21, 2017
Wireless sensors for burglar alarm sensors are an increasingly common option for the historical labor intensive wired alarm systems. However,...
PR Campaign Exploiting Manufacturer Cybersecurity on Jul 20, 2017
Manufacturers increasingly have a bulls-eye on their back. As cyber security solutions providers grow, they realize a great way to get publicity...

Most Recent Industry Reports

Avigilon CEO Attacks Asian Companies Cyber Insecurity on Aug 18, 2017
Avigilon CEO is taking aim at their Asian competitors. And he is going directly after these company's cyber security issues. In this note, we...
Sony Next Gen HD Dome Camera Tested (SNC-EM642R) on Aug 18, 2017
Sony has released their latest generation, claiming improved WDR and low light, increased IR range, and more. We tested the SNC-EM642R outdoor IR...
IP Networking Course September 2017 on Aug 17, 2017
This is the only networking course designed specifically for video surveillance professionals plus it includes live training, personal help and...
Knightscope Raises $10 Million With $3,320 Average Per Investor on Aug 17, 2017
Congrats to Knightscope. And condolences to their legion of little investors. Knightscope has disclosed they have raised $10+ million from their...
Axis and Arecont Legal Conflict Over Multi-Imager Cameras on Aug 17, 2017
Arecont threatened Axis. Axis has responded by moving to invalidate an Arecont patent. It is an important contest. Multi-imagers are Arecont's...
Directory Of Consumer Security Cameras on Aug 16, 2017
The consumer camera segment continues to grow, with new startups and models from existing players released seemingly every month. In this report we...
Cat 5e vs Cat 6 vs Cat 6a Network Cable Usage Statistics on Aug 16, 2017
Cat 5e? Cat 6? Cat 6a? What do integrators use in practice, today? 140+ integrators told IPVM. Here are the results: For those who want to...
Hikvision Responds To Cracked Security Codes on Aug 15, 2017
Hikvision has responded to IPVM's report on Hikvision's security code being cracked, both with a 2 page update to dealers and communication...
Stolen Video NVR / DVR Statistics on Aug 15, 2017
"But what happens if someone steals my recorder?" Anyone who has done more than a handful of jobs has probably heard this question several times....
Hikvision Europe Cutting Out Unauthorized End User Sales on Aug 15, 2017
The days of anyone buying Hikvision from anywhere off the Internet are numbered, at least in Europe, if Hikvision's plan comes to fruition. In...

The world's leading video surveillance information source, IPVM provides the best reporting, testing and training for 10,000+ members globally. Dedicated to independent and objective information, we uniquely refuse any and all advertisements, sponsorship and consulting from manufacturers.

About | FAQ | Contact