Danish Capital Region Bans Hikvision Purchases, Calls "Critical Threat To Security"
The most populous region of Denmark, which includes the nation's capital of Copenhagen, has banned Hikvision camera purchases following an assessment that Hikvision constitutes a "critical threat to security".
Hikvision and Copenhagen-based Hikvision partner Milestone did not respond to IPVM's comment requests. In January, Denmark's intelligence agency warned against PRC-made cameras, calling out Hikvision's vulnerabilities and PRC data laws.
In this post, IPVM examines this news and its implications for Hikvision.
Hikvision ********* "**** ** ************"
** ******, *** ******* ****** (****** ***********), *** ** *******'* **** ******* (equivalent ** ** ******) ************ * June **** ********,******** ** ****,********* **** ********* ****** ********* *** been ********** ******:
*** ******** ****** **** *** ******* Region's ******** ***** *** ** *** Information ******** "*** ******* **** *** purchase ** ***** ******* **** *** manufacturer ********* **** ** ************":
** ** *** ****, * ****** of *** ******** **** *******, ***** the ******** ******* ** ****** ******** about. ** ******, *** ******** ******* the ***** ******* **** **** **** set ** *** ******** ****** *** framework ** *** ******'* ******* ** infrastructure. *** ******** ***** *** ** and *********** ******** *** ******* **** thepurchase ** ***** ******* **** *** ************ ********* **** ** ************. [emphasis added]
** *******, *** **** ******** *** expenditure ** ***** ****** ** **********; other ********, **** ********* *** ********, are ********* **** ** *** ********* level.
Reasoning ****** ***: ********* "******** ****** ** ********"
*** ******** ******* *** *** ******* Region **** ** **** **********, **** the **** ****** ***** ** ********, when *******'* *** ************ ****** *** cyber ********* ****** * "******** **************" stating **** "***** ******* **** *** manufacturer ********* *********** * ******** ****** to ********":
** ** ******** ****, *** ****** Security *** ************ ******* [***/ ********* Efterretningstjeneste] *** ********* *** ***** ************ * "******** ************** ********* *** use ** ************ *******".The ******** ************** ****** **** ***** ******* **** *** ************ ********* *********** * ******** ****** ** ********. The threat consists of a backdoor that "makes it possible for an attacker to access the camera without the use of authentication". [emphasis added]
*** **************, *******, *** *** ********** recommend **** *** ***** ******* *** that "*** ***** ******* ** ********* to ***** *** *******". * ***** before **** ******** **********, *******'* ************ agency ********** ***********"******* ********** ** *** ******* ************ equipment *** ********-********* *******", ****** *** 2017 ********* *****(********* ******** ******************* ******** *********).
Status ** ******** *******
*** **** ***** **** ******* ********* Hikvision ******* "*** ****** ** *********" if **** *** ******* *** "** they *** *** **** ** ******** to ******** ********", ********* **** **** be "************ ** **** ** ********":
** *** ** ***** ******* ** the ********* ***** *** *********, ** has **** **** ******* ****they *** ****** ** ********* ** **** *** *** **** ** ******** ** ******** ******** *** ** **** ** **** *** ** ************** ******** *******. If they are used for clinical purposes or cannot be satisfactorily patched, the video cameras willbe ************ ** **** ** ********.
**** ***** ********* ******* ****** ********* that **** ******** **** **** ** be *******, *** * ******-****** ****** can ****** ** ** ** ******* and ** *** *** *******. ** Hikvision ******* *** ** *** ** the ******, *** ****** ******* *.*. which***** ***** *** *** ****.
Politician: "* ***** **** ** ***** ** ******"
**** *********** ****** ******, ** ******* politician ** *** ******** ******* (******* equivalent ** * ** ***** **************) who ** *** ******* ** *** Danish *****-******** ******* *** *** **** pushing *** *** ********* *** ***** his ******* **** ********. ****** **** IPVM **** ***** *** ********* ********** ban *** **** ******* ** *** Capital ******, ** ****** ** **** spread:
I ***** **** ** ***** ** ****** *** *** ** * **** ** ****** ** **** ************** *** *******. And maybe also at one point, the government will say, 'this is how you do it', it ***'* ** * ***** ******** ******* [to ban Hikvision]. I'm running for parliament now myself and this should be a government decision: we should have no cameras or surveillance systems from Russia, China, or Iran. [emphasis added]
****** **** ** ******** **** **** should ***** ** ***** *** ***** PRC ***** ** ****, "*** ***** now **'* **** *********".
Hikvision, ********* ** ********
********* *** *** ******* ** ****'* comment *******. ******* *** *********, ***** is ************* ** ********** *** ******* a********* *******, *.*.:
******** ********** ****** ************ ******'* ******* ******* online *** ************ *******, ********* **** it *** "*****" *** **** ** recommends ********* "** **** *** ******* their ****** ******* ** * ******* and ******* *******."
Impact ********
**** ** * *********** **** ** Hikvision ** ******, ********** *********** *** ban ** **** ******** ******* ****** than ***** ******, ** ********* ****** blame **** *********** ** '***********' ** the ********* ** * "********* ***" between *** ** *** *****, ** it *** **** ***** **** ******** ****. *** ***** **** *** ********* is **** ************ ********* ****** ******* and ****** ***** ***** ******** ********, leading ** ********* ********-***** **** ** the **** ***.