Sony Misleading Marketing Hides Cracked Backdoor
By: Brian Karas, Published on Jan 25, 2017
Login to read this IPVM report.
Why do I need to log in?
IPVM conducts unique testing and research funded by member's payments enabling us to offer the most independent, accurate and in-depth information.
Related Reports on Marketing
Directory of 68 Video Surveillance Startups
on Sep 18, 2019
This directory provides a list of video surveillance startups to help you see and research what companies are new or not yet broadly known.
2019...
ASIS GSX 2019 Final Show Report
on Sep 12, 2019
IPVM went to Chicago for ASIS GSX 2019, with many exhibitors disappointed about traffic and the exhibitor schedule changing next year.
However,...
"Stats Don't Lie" Says Deceptive IFSEC
on Jul 30, 2019
While IFSEC has declared #statsdontlie and trumpeted seemingly skyrocketing visitor numbers, they are decieving about their show's problems.
On...
ZeroEyes Gun Detection Startup
on Jul 16, 2019
A gun detection video analytics startup, ZeroEyes, is being led by a group of 6 former Navy SEALs, aiming to "save lives" by using AI to assist...
Bosch Integrating Sony Video Security Sales And Marketing Team
on Jul 03, 2019
What is the future of Sony in video surveillance?
In 2016, Bosch and Sony announced an atypical 'partnership'. Now, Bosch tells IPVM that they...
Ivideon Russian VSaaS Profile
on Jun 27, 2019
Ivideon was an early VSaaS entrant, initially focusing on the consumer market, claiming massive growth to IPVM in 2014.
We spoke to Ivideon, to...
.jpg)
IFSEC 2019 Show Report
on Jun 19, 2019
The UK's largest trade show, IFSEC, is underway and IPVM has been examining what is new and happening at the show.
Inside, we cover:
Huawei...
ADT Eliminating Acquired Brands, Unifying Under 'Commercial' Brand
on Jun 14, 2019
ADT is eliminating the brands of the many integrators it has acquired over the past few years, including Red Hawk, Aronson Security Group (ASG),...
Nortek and SDS Fight Over Failed Settlement
on Jun 05, 2019
Distributor SDS said they reached a deal with Nortek but Nortek says no settlement was reached and the suit is still on.
In this post, based on...
Verkada Favorability Results 2019
on May 29, 2019
Verkada has taken the industry by storm with the fastest growing video surveillance sales organization ever and a half billion dollar valuation....
Most Recent Industry Reports
Open Access Controller Guide (Axis, HID, Isonas, Mercury)
on Sep 19, 2019
In the access control market, there are many software platforms, but only a few companies that make non-proprietary door controllers.
Recently,...
Axis Perimeter Defender Improves, Yet Worse Than Dahua and Wyze
on Sep 19, 2019
While Axis Perimeter Defender analytics improved from our 2018 testing, the market has improved much faster, with much less expensive offerings...
Directory of 68 Video Surveillance Startups
on Sep 18, 2019
This directory provides a list of video surveillance startups to help you see and research what companies are new or not yet broadly known.
2019...
Uniview Prime Series 4K Camera Tested
on Sep 18, 2019
Is the new Uniview 'Prime' better than the more expensive existing Uniview 'Pro'?
In August, IPVM tested Uniview 4K 'Pro' but members advocated...
US Army Base To Buy Banned Honeywell Surveillance
on Sep 17, 2019
The U.S. Army's Fort Gordon, home to their Cyber Center of Excellence, has issued a solicitation to purchase Honeywell products that are US...
Vivotek "Neural Network-Powered Detection Engine" Analytics Tested
on Sep 17, 2019
Vivotek has released "a neural network-powered detection engine", named Smart Motion Detection, claiming that "swaying vegetation, vehicles passing...
Schmode is Back, Aims To Turn Boulder AI Into Giant
on Sep 16, 2019
One of the most influential and controversial executives in the past decade is back. Bryan Schmode ascended and drove the hypergrowth of Avigilon...
Manufacturers Unhappy With Weak ASIS GSX 2019 And 2020 Shift
on Sep 16, 2019
Manufacturers were generally unhappy with ASIS GSX, both for weak 2019 booth traffic and a scheduling shift for the 2020 show, according to a new...
How Cobalt Robotics May Disrupt Security
on Sep 13, 2019
While security robots have largely become a joke over the last few years, one organization, Cobalt Robotics, has raised $50+ million from top US...
Panasonic 4K Camera Tested (WV-S2570L)
on Sep 13, 2019
Panasonic has released their latest generation 4K dome, the WV-S2570L, claiming "Extreme image quality allows evidence to be captured even under...
Comments (3)
Rodney Thayer
There should be a CVE number for this issue. The fact there isn't suggests Sony doesn't get CVE's allocated for itself (and nobody shouted loud enough to get the CVE elves to allocate one unilaterally.) Classic example of an epic fail in answer to the question "what's your cyber security posture". The fact a flaw existed is almost less disturbing than their denial process. Although, backdoor passwords have been considered bad for years.
So? How's it' going out there in integrator-land selling vulnerable Sony cameras?
Create New Topic
Undisclosed #1
The Gen6 DES password is easily cracked from the hash in less than two hours.
The real gem here is the revelation of the script syntax surrounding: /debug/start-telnetd-sshd.cgi, which completes the exploit.
This, to my knowledge has not been published by SEC Consult or anyone else, AFAIK.
Create New Topic
Undisclosed #1
Curious, was anyone able to crack the Ipela Gen5 password from this hash?
$1$$mhF8LHkOmSgbD88/WrM790
If so, don't post it, I'm just wondering what the length etc, was actually. Had a process running for a couple weeks on it with no results.
Create New Topic