Danish Intelligence Warns Against PRC China Cameras, Cites Hikvision And Dahua Vulnerabilities
Denmark's intelligence agency has warned police against installing internet-connected PRC video surveillance systems, calling out Hikvision and Dahua's cyber vulnerabilities and PRC laws mandating that China companies assist PRC intelligence.
IPVM obtained the full Danish intelligence document detailing their concerns, which we examine in this post. Hikvision declined to comment.
Denmark joins the UK as the second European country with public documentation confirming restrictions against Hikvision after the UK military issued guidance "not to use/install Hikvision".
PET **********
*** ****** ******** *** ************ ******* or *** (********* *********************) ** *** main ****** ****** **** ********* *******'* national ******** ****************** ** "********** ******* ** *******, democracy *** ******** ** ****** *******":
** *** **** ** ******** ************ and ******** *********, *** ** *********** for ***********, **********, ************* *** ********** threats ** *******, ********* *** ******** in ****** *******. **** ******* ** threats ** ******* ** **** ** threats ******** ** ****** ********* *** Danish ********* ******.
*** ***** **** ****** ************ ******** *** ******* ***** **** ******* ************.
Document ********
** ******** ****, *** ******* * ******** *******'* ******** ****** (************) ********* its ******** ****** ********* *** *** China *********:
**** **** *********** ***** ****** ********** ****** **** ***** ~*** ********* cameras ***** **** ** *********** ** Aarhus (*******'* ****** ******* ****). ** 2020, ****** ***** **** ******** **** Hikvision *** ***** ******** ********** ** ********** *********** *********** **** ********* **** **** *********.
Recommends "******* **********" *** *** ****
*** ****** *********** ****** ******** "******* reluctance ** *** ******* ************ *********" that ** ********-*********, "**********" *** ***** "presumed ** ** ** ********" ** PRC ************ **** ** ****** ********* and ******** **************:
**** ****** ** ********-********* ('****') *******, PET ***** **** *** ******* ************ Act ** **** ********** **** ******* companies, ************* *** ***********, ** ****** where ** *** ***** **** *** located, *** ******* ** ****** *** report ** *** ******* ************ ******** if *** *********** ** *******. ******* this **********,PET ********** **** ***** ** * ******* ********** ** *** ******* ************ ********* *** ********-********* *******, especially in relation to use in areas **** *** ** ******** ** ** ** ******** ** *** ******* ************ ********. After a specific assessment, such areas could be areas that are linked to the security of the highest state bodies, critical infrastructure, public transport areas as well as Denmark's defense, security and emergency preparedness. [emphasis added]
**** *********** **** ***,***** ****** **** *** ***** "***** support, ******, *** ********* **** ******** intelligence" [******* *, ************ ***, ****]:
Hikvision *** ***** *************** *****
*** *** ***** *** ******** ********* vulnerabilities *** *********** ***** *************** ** support *** *** ************** **** ****** conduct **** *********** ****** ********:
*** *** *********** ***** *** ******** vulnerabilities ** ******** ******* **** *********. The *** *************** *** ********** ** the ** ******** ************* ******** (***) under ****. ***-****-**** *** ***-****-****. ** addition, *** ** ***** ** ********** vulnerabilities ** ******* ** *******, ********* cameras **** ********* *** *****.
***** *************** **** ******** ** **** by **** *********** ******** ******************* ******** *********. ***** **** *** ******* *************** around **** ****, *.*.***** ********* **** ******.
*** *** *** *** **** **** recent, *** **** ********, *************** **** both ********* **** ****: ************ '******* ***** ******** *************'*** *************** *************, *** *** *****, **'* *** major*** ******** ***************.
*** ***'* *********** **** *********** ******* three *******:
*** ********* ****** ** **********: *) Which ******* *** ********* ** *** same ******* ** *** ******* *******-********* cameras *** ** **** ** ** entry ***** *** ***** ********* ** the **** *******. *) **** *** who *** ******* ****** **** ****** can ******* ******* **** ***** ****** are ****** ** ** **** *** the ****'* ******** ********. *) *** critical *** ************ *** ********* ** video / ****** **** *** ******* are. *************** ** *** ********* *** be **** ** **** *** *** cameras ** ****** *** ***** ******.
Distinguishes ******* '****' ** '******' *******
*** *** ************* ******* ********-********* *** closed *******, ******* *** **** ** "minimal" *** * ****** **** ** "isolated" **** ******* "**** *******":
** ******** ** ******** ***** **** surveillance *******, *** ********* * *********** between ********-********* ('****') ******* *** ****** systems, ************. **** ****** ** ****** systems, ***'* ******* ********** ** **** the **** ** ************ ************ ******* is ******* ** **** ** ** isolated, ****** ****** ******* ******** ******, and ****** ******* *** **** *******. If *** ******** ***** *** *** of **-** *** *********, ***** **** be ***********. ************ *** *********** ****** also ** ********* ** * ******* installer.
*** ********** ** **** **** ********* gear ***** ** ******** *** ******** use. **** ******** *** ***** ** 'open' ** '******' ******* *********** ****** ********** *** *********** ****** FCC ********.
Denmark ******** ********
*** ****** ************ **** ***********, **** *** ********* ******* ****** mayor***** ************** *********** ***** ***** "** *** and ******** *********** ***** *** ***** a ******** ******** ****":
** **** *** ******* ********* ********* cybersecurity **** *********. ** ******** ** the ******* *********, ** **** *** found *** ***** ** ******** ******** or ********* ********.
** ****** *** ***** ***********' ****** and ********** ** *** **** *** will ** ****** ***** ** *** and ******** *********** ***** *** ***** a ******** ******** ****
****** ********* ********* ****** ******************** *** * "*******" *** **** as * ****** ** *** ********, he *** ****** **** ****** ******* around *** *******:
More ****** ************ ******
******** ******* ********* *** *** ************ is ******* ** ** ******,**** ***************** ****************** ***** **********'* ***** ** ********* cameras ** ****. ** *** **** run, **** ***** ** ****** **** more ******** ********* ********* ************ ** bans ** ***** *********/*** ************ *********, based ** ********/***** ******** *******.
********* ********** ****** **** **** ******* a ********* ** ******. **** **** I *** ****, **** *** ****** a ****** ****** ***** ** *** Danish ***** ************ ******** **** ***** proponents ******* ******** ********.
**** **** * *** ****, **** has ****** * ****** ****** ***** in *** ****** ***** ************ ******** with ***** ********** ******* ******** ********.
**** ** **** ******** *** **** in ***** ****** **** **** ***, especially **** *** **********, **** *** Vision *** ***** *** ***. ***** it **** **** **'** ** ***** hard ** ***** *** **** ******/********** when ***** *** ********* ***** ******* of ********** *** ***'* **** ** even *** *** ***** **** *** Vision ** *****, *** * ****** even ****** ****** ** ********* *** either ***'* ****, ** **** **** about *****.
********* *** *********:
** *** ***** ** *** ********** and ************** **** *** ****** ******** intelligence *** ******** ********* (***). ************* *** ***** ********* ** *** security ********** **** ******** *********** ****** the ***** *** ****** **** ****. This ******** ************ *** ********* ** test *** ******* ***** ****** ******* in * ******* *** ******* *******. Additionally, *** ***** ************ ****** ** an ******* *** ** ****** ** the ********** ******.
** ******** *** ********* **** ** Milestone:
********* "** *** ***** ********* ** the ******** ********** **** ******** *********** around *** ***** *** ****** **** them", ********************* *** **** *** ********* **** PET's ******** ****?
****, ** ** ******* ** *** that ***** *** ********* ********************? ** ****'* *** *******, *** does***************** *** ************ **** ***** *** Hikvision?
* **** *** *** **** ** your ******* ********. **** ********* **** to ** *********. ************* ** ** no ******. * **** ** ****, so * ***** **** * *********...
***** *** *** **** **** **** an ********, **** *****´* **** *******.
*** ************** **** ***/**, ** ** use *******. ** ***** **** ** say **** ******* ******** ****** ** used!
** ***, ****** *** **** *******, I'd **** ** ******* *** ****** you ****.
*** ************** **** ***/**, ** ** use *******. ** ***** **** ** say **** ******* ******** ****** ** used!
**** ********* *** ***'* ******** ***** specifically ********** "******* ********** ** *** Chinese ************ *********" ** ******* ********** such ** ******** **************. *** ***** specific *** *********** ******* *** ******** Intelligence *** ** ****, **************** ******* ********* ** "****** *** ****** ** *** ******* intelligence ********". *** **** ***** *** serious ********* *************** **** **** *****.
** **** ** * ***** ******** and ******** ******* ****** **** **** generic "*******".****, **** *** *** ****** **** the *** *********** **** "******* ******** cannot ** ****" ** *** *******. That ** *** *** ******** ** the ******* **** "***** *******" *** not "****" ** "*********".
* **** *** *** **** ** your ******* ********. **** ********* **** to ** *********. ************* ** ** no ******. * **** ** ****, so * ***** **** * *********...
***** *** *** **** **** **** an ********, **** *****´* **** *******.
**** ******* *** *** ******* ** John ********, * ***** **** ***** entirely ******. ******* **** *** * have ******** ******* ***** ** ******* people. *** *** *********** **** **** article ***** **** ******** *********** ** prejudice ** ********* ** * ** not **** ********, * ** ** EU *******.
*******, **** *********!
* **** *** ***** ********* *** comment ** **** ** **** *** Denmark's ******* ***** ************ ******* *** a ******* ** ***** *** *********. I ***** **** ** ******* ** tomorrow.
****, ******* ******* **********,**** **** *******, *********'******* ************** *** ** ******** ** from ******* *** ********* ** *** comment ** ****** ** *********.