Genetec Now Detects Insecure Camera Firmware

Author: Brian Karas, Published on Nov 29, 2017

Genetec is heavily emphasizing cyber security and cyber resilience. From initiatives like CHAVE to 2 Factor Authentication to Expelling Hikvision.

Now, Genetec Security Center will warn if you have vulnerable firmware installed on cameras. The company has released a new feature in Security Center 5.7 that keeps track of most recent firmware for installed devices, issuing a warning if devices are running out of date firmware are connected to ones Genetec system.

We examine Genetec's cyber security-focused firmware management enhancement, including when it can notify users to potentially vulnerable firmware, and where it lacks ability to warn.

******* ** ******* *********** ***** ******** *** ***** **********. **** initiatives ************ ****** ************************* *********.

***, ******* ******** ****** **** **** ** *** **** ********** firmware ********* ** *******. *** ******* *** ******** * *** feature ** ******** ****** *.* **** ***** ***** ** **** recent ******** *** ********* *******, ******* * ******* ** ******* are ******* *** ** **** ******** *** ********* ** **** Genetec ******.

** ******* *******'* ***** ********-******* ******** ********** ***********, ********* **** it *** ****** ***** ** *********** ********** ********, *** ***** it ***** ******* ** ****.

[***************]

Firmware ******** ********

******** ****** *.* **** *** ******* ** ********* ** ********* edge ******* *** ******* *** **** ****** ********* ********, ********* ** *******. ** ****** **** *******, ******* **** they ******* **** **** ******* ********, ******* *****, *** ***** information ******* ** ***** * ******** ** **** ****** ********* firmware *** ********* *******. **** ******** ** ****** ****** *******'* cloud *******, *** ******** ****** *.* (** *****) ******* *** query **** ******** *** **** ******/***** **** ** ******* ** find *** ****** ********* ********. ******* ****** *** ******** ** only ******* **** *** ******** ************ ***** *** ******* *** verified *** ******* *** ************* **** ******** ******.

***** **** ******* * ************ **** *** ******** ** ******** for * ****** ** ***** *******, *** *** **** *** a ****** ********, ***** ***** ********* ********* **************** ** ** *.*.

** *** ********* ****** ****** *****, ***** *** *** ***** cameras ********, *** ******* (** ****) **** ** *********** *******, 1 ****** (***) *** ** ****** *** * ***** *************, and * (*****) **** **** *********** ******* *** ******* ***** other **** ***************:

******* **** *** ******* ******** ******** ** ******* *********, ***** on ******** ******** **** ********.

No ************/*** ********

********* ** *******, ** ******* ********* ** ******** ** ******* ongoing ******** ****** *************. *******, *** ******** ****** ****** **** need *** ******, ** ***** ** ******** *** ****** ******** database *********** **** *******.

No ********* *******

*** ******** ******* ******* **** ******** ***** **** * ***** version ** ******** ** ********* *** * ******. ** **** not ************* ********, ** *******, ******** *** ******** *******, ******* leaving ***** ***** ** ************** ** *******.

Only ***** *** ***** ***************/******

******* ******* ****** ** *********** **** ************* ** ***** ** compile *** ******** ******** *** ******* *****, **** *** ******* to **** ********* **** ************* *******. ** * ************ **** not **** ** ***** **** * ***** ******** ******* ********* particular ***************, ******* **** *** ** **** ** ***** ********** the ***** ********** **** *** ******** ********. ************, ** *************** have *** **** **********, ** ******** *********, ***** *** ** running ********** ******** **** ** ******** ****** ******* ** ** being ** ** ****. *****, **** ** *** ** ******* only ***** **** ** **** ** ***** *********** ***** ******** vulnerabilities ** *****.

Manufacturers *********

******* ****** **** ******** ******* *** *** ******** *** ********* supported, *** ***** **** **** *** **** ******** *********** *** the ********* *************:

*******
****
*****
******
*********
*********
*****
****
*******

******* ******* ** **** *** ******** ****** ****** ********, ********* a **** ** ******* ******** *** ** **** ************* ** they *** *** ****** **.

Hikvision ********

************** ******** ********* ********* ********** ******* **** ** **** ******* ********* *******/******** ** **** of *** ******** ******** ******* *** *** *** *** *********** future.

Progressive *******

** ** **** *******, ** *** *** ***** ** *** other ***** **** *********** ****** ***** **** ****** ******** *** be *** ** ****, ************ *** *** ***** *******. **** companies, **** ** ********, **** ********* ** ****** ******** ************* and ******* *** ***** *** ******* *****, ***** ** ****** to ********* ** ** ** ****** *** * ************ ** keep ***** ** ***** *** ******** ******* *** ********.

Poll / ****

Comments (10)

Jesse Crawford

OpenEye | 11/29/17 03:22pm

**** ** * ***** *******! **** **** *******.

Randy Lines

11/29/17 04:41pm

** ***** ** **** ** **** *** * **** ** the ******** ** **** ** ******* ** ******* ******* ** be **** **** ******* ******** *** *** * ******.

***** ********** ** *******.

** *** ***** ** *******, * ** ******* ******* ** HIK ****** **** **** *** ****. **** ******* ******* *** and ************ *** *** ********* ** *** **** **** ******. Full ** *** ***** **** **** **** * *** *****.

***** *******.

***

Ian Johnston

In reply to Randy Lines | 12/03/17 08:01pm

******* * **** ** *** ******** **** ** ******* ****** in *** ******, ** *********** **********. ** ***** *** **** to ****, *** *** *** ** ** **** ** ******* the **** ** *** ***** ****, ** **** *** ******** just **** *** ***** *** *** ********* ** ***** ** hear.

**** ** **** ** * ***** ** **** *** *** read *** ******** ********** ** ****** **** *** ******** ***** was ** **** ********* ** *** ************.

**** ******* ***'* * ****** ******, *** ** ***** ** incrementally **** ********* ** **** ***** ******** ****** ** *** device.

Undisclosed #2

In reply to Ian Johnston | 12/03/17 09:40pm

*******:****** **** ***** ********* ******* - *** ************* ****** **

Jeff Junker

Dell EMC - Video Solutions | 11/29/17 05:19pm

**** ** ** ********* ****** ** ******** ********* **** ********* use ** ********** ******** *****. ******* *********** ********** ** ******* area **** ****** ** ******** *** ****** ********** ** ******** policies.

bashis mcw

11/29/17 05:41pm

*********** *** **** *****

Undisclosed Manufacturer #1

11/29/17 07:02pm

******* **** ***** ******* * **** ** ********* ******** ******** also :-)

Kenton Peterson

11/29/17 07:08pm

***** *******. ********** * *****-*** ***** ** **** **** *** of *** ******* **** ***** ******** ** *** ******. ******* it ***** ** **** ** *** ***** **** ******** * file **** **** *** **** ***** ** ** * *** to **** ** **** *** ******** ****** ****** ** ****** all ** *** ******** **** **** ***, ****** **** ******* internet ****** ** *** ** ******.

Andrew Elvish

In reply to Kenton Peterson | 11/29/17 07:50pm

** ******,

**** ** ****** **** ** *** ******. *** ******* ****** Service *** *** ** * ***** ** **** ******** ****** does *** **** ** ** ********* ** *** ********. **** RSM *** ******* *** **** **** *******.

Undisclosed Integrator #3

12/04/17 01:39am

**'* *********** ** *** *****-******** ***** **** ** *** **** step *** *** *********. ** **** **** ****, *** * perfect ******, *** * **** ** * *** ****** **** nothing. * **** ***********, ******** *** *********** **** ** *******. (From * ****** ***** ******* ** ******** **** **** ** head **** *******.)

Login to read this IPVM report.

Why do I need to log in?

IPVM conducts unique testing and research funded by member's payments enabling us to offer the most independent, accurate and in-depth information.

Most Recent Industry Reports

BluePoint Aims To Bring Life-Safety Mind-Set To Police Pull Stations on Sep 20, 2018

Fire alarm pull stations are commonplace but police ones are not. A self-funded startup, BluePoint Alert Solutions is aiming to make police pull...

SIA Plays Dumb On OEMs And Hikua Ban on Sep 20, 2018

OEMs widely pretend to be 'manufacturers', deceiving their customers and putting them at risk for cybersecurity attacks and, soon, violation of US...

Axis Vs. Hikvision IR PTZ Shootout on Sep 20, 2018

Hikvision has their high-end dual-sensor DarkfighterX. Axis has their high-end concealed IR Q6125-LE. Which is better? We bought both and tested...

Avigilon Announces AI-Powered H5 Camera Development on Sep 19, 2018

Avigilon will be showcasing "next-generation AI" at next week's ASIS GSX. In an atypical move, the company is not actually releasing these...

Favorite Request-to-Exit (RTE) Manufacturers 2018 on Sep 19, 2018

Request To Exit devices like motion sensors and lock releasing push-buttons are a part of almost every access install, but who makes the equipment...

25% China Tariffs Finalized For 2019, 10% Start Now, Includes Select Video Surveillance on Sep 18, 2018

A surprise move: In July, when the most recent tariff round was first announced, the tariffs were only scheduled for 10%. However, now, the US...

Central Stations Face Off Against NFPA On Fire Monitoring on Sep 18, 2018

Central stations are facing off against the NFPA over what they call anti-competitive language in NFPA 72, the standard that covers fire alarms....

Hikvision USA Starts Layoffs on Sep 18, 2018

Hikvision USA has started layoffs, just weeks after the US government ban was passed into law. Inside this note, we examine: The important...

Chinese Government Praises Hikvision For Following Xi Jinping on Sep 17, 2018

The Chinese government council responsible for managing China's state-owned companies praised Hikvision’s obedience to China’s authoritarian leader...