The Insecure Verkada Access Control System

By Brian Rhodes, Published Jun 25, 2020, 11:33am EDT (Info+)

While Verkada touts the security of its system and that how their new door controller was "built from the ground up", one particularly surprising and insecure element is its dependence on Wiegand and lack of OSDP.

IPVM Image

Inside this note, the company answers why they made the choice and we examine how Wiegand represents a risk that most Verkada competitors have taken steps to mitigate.

[Update June 30, 2020 - Verkada tells IPVM they now plan to support 3rd party readers via OSDP "over the next 3-4 months."]

Verkada ****** ******** *******

*******'***** ************** ***** ***** *** ***** ******* are ********* *** *******:

IPVM Image

******* ** *********** *** **************, ********* in *** *****. **** ****** ********* now ***** *********, *** (*************) *********************** ** *** ***-*****.

**** ***** *****-***** ****** ********* ******* OSDP. *** *******, ******, *****, *** Feenics ******* ****, ** **** ******* and *******.

Points ** *** **** ***** ** *************

******* ********* ** **** ****** **** chose ** ***** ******* ** ******** Wiegand ***** ** ****** ***:

*****, ** ******* ******* ** **** is *** **** ****** ******** **'** seen ** *** *****.

**** ***** *** ******** ***** ** 'secure' **** ** *** ******, ******* to** **** ******:

** *****'* **** *********** ******** ** OSDP (**** ** *****:*****://****.***/*******/****-**) *** *** ******** ** ******* 3rd ***** **** *** * ******** update ** *** ****** ***** ** customer ******.

****** **** ***** ******** ********** ******** hardware *********, *** ** ******* ***** requires ******* **** **** * '******** update', ** ******** ********* *** ******* to **** ** * ******** ******.

OSDP **** ** ****-******** ******

***** ******* ****** ** *** ******* OSDP ***, *** ******** ** ****************** used **** ********** **** ********** *** high-security ********** *********.

** ********** ******* *** *** ****, many ** *******'* ******** ********* **** not ** **** ** ******** ** use *** *******'* ****** ******.

Wiegand ******* ****

*******'* *******-**** ******* ******** ** *********** to ***** *** **** **** *********** using ********** *** *********** ******* *******.

**** *******, *** **** ******* *** reader *** ********** ** *** ********* and '***-**-***-******' ************ ******* *** **** to *******.

** ******* ~$** ******,*** ******, ************ ***** ***** ** *******, can ** **** **** *** ******/********* side ** *** ****, *** ** undetectable ** *** ****** *** ****** managers.

IPVM Image

*** *********** ******* **** *** **** be **** ** ****** ********* ****** of ***** ***** ** ** ****** stolen ********** **** ***** **** ******, bypassing ******* ********.

*** ***** ***** ***** *** ***** skimmers *** ********* *********:

******* ******** *** **** *** *********** to ***, **** **** **************** ~$** - $** ******.

Verkada's **** ******* ** ******* ****** *******

****$** ******* ******* ****** ** ******* 2020, *** ******* *** ***** ********* to ******* **** ******* ** *** access ****.

***** *** '***-***' ********** ****** ** not * *******-******* *******, *** ******* has ******* ******* *********** *** ******* development ** *** *******, *** ** OSDP ******* ********* * **** ** market ***********, *** * ******* ** constrained *********.

Fundamentally, ******* ** * ************* ****

******* ******** *** ******** ** ***** offerings, ******* ** '*******-******** ** **** **** **** ****** and ****'.

****** ** *** *******'* '************* **********' *****, ******* ***** ***** ********** to ********, ******** * ******** ** 'Removing ******** ***************'. *******, ******** **** support ****** ********* **** * **** documented *** ******** *************.

Verkada, *** ****

** ******* ** ** ***** ********* to ************* ** **** *****, *** company ****** *********** **** ******* *** add **** *******.

UPDATE, ******* ** *** **** *** ***** *******

***, ******* **** **** "****** ** roll *** ******* *** *** ***** OSDP ******* **** *** **** *-* months." **** **** ****** **** ******* on ***** **** ********, ****** *****:

1OSDP *******: We have built the hardware to support OSDP (we have a 4-wire input next to the 6-wire input for Wiegand, designed for OSDP readers). To be clear about what we support initially, we informed you and our partners that we do not support OSDP in the first version of the product. We have always planned to launch OSDP for all devices (third party devices and a potential Verkada reader) in the near future.

** *** **** **** ** **** - *** *** **** ****** ** the ******** ***** ** **** *** developers ** ***. ** **** ***** in **** ******* **** *** *******. In *** ******* ********** ** ****, you'll ****** * *-**** ***** ***** beside *** *-**** ***** *** *******. That ** ******** *** **** *******. We *** ********* ** ***** ****** protocols, ** *** **** ********* *** a *****-***** ******** ****** **** ******** access ******* *** ***** *** ****-**** verification ** ****.

*'* **** ***'** ***** **** ******** of *** ************ - **** ****** ones, ***** **** ******. *** **** majority ** ********* **** ******** ******* infrastructure, *** ********** ***** **** **** Wiegand ************** ** ****. ******* ** this, ** **** **** * ********* decision ** ******* **** ******* *** OSDP *********. **** ** **-******* ** purchasing ***-*** ******* ** ***** ****** not ** *** ****** - *** we ***'* ***** **** ****** ******* folks **** ********** **** ********** ********! For **** ** *** *********, ** are **** ** **** ***** ******** access ************** **** ****** *** ****** resistant. *** ******* ******* ************ **** the ****** *** *****, ******* *** person *** ****** ******** ************ ** can ****** ******** ***** ***** *** tampering ****** *** ***** ** **** a ****** ** ******** *** **** identified. ** **** **** *** ********** analysis ** ***** ****** ************* ****** as *** ******** ** *** ******* lines ****** * ******** ****** ****** would ** **** ******* *** ********* through ******* *******.

Comments (31)

Undisclosed Integrator #1

06/25/20 04:17pm

****** ** **** *** **********. **** anyone **** ***** *** *** *** one ** *****?

Agree
Disagree
Informative
Unhelpful
Funny

Undisclosed #2

In reply to Undisclosed Integrator #1 | 06/25/20 05:14pm

***** *** *** *** **** **** at ***************. * **** ** **** easier ** *** **** *** *** interface **** **-** *** ** **** not ******* * *******.

Agree
Disagree
Informative: 2
Unhelpful
Funny
Avatar

Travis Willis

06/25/20 05:38pm

**** ** * ****** ******* *** I ** ************ *** *** ********* at ***. **** *** **** ** money **** ****** **** *** ******* capable ** ***** ******. **** ************ of *** *** ********** ** ******* was ****** **** *** ** ***** you ****** **** **** *** *** skip **** ** *** ** ******?

Agree: 2
Disagree
Informative
Unhelpful
Funny

Undisclosed #3

In reply to Travis Willis | 06/25/20 05:48pm

*** ***, **** ********** ** *****-***** with ** ******* ************. ********* ** employee, *** **** *** ** ****** issues? **** **** ** ******* ******.

************, *** **** ** *** */* ports **** * *** ** ******** on *****-***** ******. ***** *********, **** release *******, **** *********, *********.

Agree: 12
Disagree: 2
Informative: 2
Unhelpful
Funny
Avatar

Daniel Tyrrell

In reply to Undisclosed #3 | 06/25/20 07:32pm

*'* ** ******* ** **** * response **** *** ****** *** *********. Why **** *********, ** **** ***** they ********* ****.

Agree: 4
Disagree
Informative
Unhelpful
Funny

Michael Miller

In reply to Daniel Tyrrell | 06/25/20 07:35pm

** *** ******** * ****** ***** rep ****** ** ****** *** **** a ***** **.

Agree: 2
Disagree
Informative
Unhelpful
Funny: 12

Undisclosed #3

In reply to Daniel Tyrrell | 06/25/20 08:04pm

*** *** ** ****, ******. *'* curious ** *** ** **'* * disagreement **** *******, * ***** **********, or *********.

****'** ****** *** ******** ** *** attention, *** **** ****** ******* ******* is... *** ** ** *** ****...

****.

Agree: 2
Disagree
Informative
Unhelpful
Funny: 4

Undisclosed Distributor #4

In reply to Undisclosed #3 | 06/26/20 12:56am

***...*** ** ****. **** **** ** 'epic ****' ** **. **** ****** (US)$80 *** ?*** ******** ***** ***** for **** **** ** ***** ****** in. **** ** *******, *** *****'** done ****** **** ****!

Agree: 3
Disagree
Informative
Unhelpful
Funny

Undisclosed Integrator #11

In reply to Undisclosed #3 | 06/27/20 05:46am

**** ***** ***** ** ***** *** any *** ***** **** *****'* ****** on *** *** **** *** **** end ******. ** **** *** ** down **** ****** ********* **** ****'* going ** ** ******* ******* ******* they **** ** **** ** *** cloud ** **** **** ********** ***.

******* ***** ** **** ****** *****. The ****** ** ****-***** *** ************ beyond * **** ******* *************.

***** ** *** "***** *** ********" option :)

Agree
Disagree
Informative
Unhelpful
Funny

Undisclosed Integrator #14

In reply to Undisclosed #3 | 06/29/20 03:18pm

*** **** **** *** **** ******** to ******** ** **** ** ** is ** *** **** ******* ******* as *** ****** (********) *** *** using. * **** *** **** ********* in *** ****** *** **** **** using ** *** ***** * ****. While * ** **** ***** **** be **** ** ***** *** ** any ***** *** *******, ************* ******* is ***** ** *** ****.

Agree
Disagree
Informative
Unhelpful
Funny

Undisclosed #3

In reply to Undisclosed Integrator #14 | 06/29/20 03:26pm

******, ** #** - **** ******* from **** * ******* **** ****.

*** *** ******* ** *** *** add/remove *********** ** ****** ****** ******* internet ************?

Agree
Disagree
Informative
Unhelpful
Funny

Undisclosed #5

06/26/20 03:25am

******* ******* (**** **) **** *****:

********: ** *** ******* ****?

********: ****, ** ******* ******* **** for *** *** ******* **'** ** extending **** ******* *** *** ***** readers **** *** ****

(****** *****, *** *** ***** **********)

Agree
Disagree
Informative
Unhelpful
Funny: 1
Avatar

Brian Rhodes

IPVMU Certified | In reply to Undisclosed #5 | 06/26/20 04:33am

*** '*' ** **** ****** *** 'Open', ***** ***** ** ** ************* and *** *********** ** **** ******* readers.

** *** (*** **********) ******* ****** does *** ****, **** **** ***** the ********** **** ******* ***** *** party **** ******* ** ****, ** the '********* **** *** ****' ********* contradicts *** *****.

Agree: 3
Disagree
Informative: 1
Unhelpful
Funny

Undisclosed Manufacturer #7

06/26/20 03:59am

** ** ***** ? **** ***** doesn’t ***. ****** ******* *****’* **** UL *******.

Agree
Disagree
Informative
Unhelpful
Funny
Avatar

Jacob Hengel

YourSix | 06/26/20 04:08am

*** ***** *** * ****. ***** massive ********** *** ***** **** ** understanding ******/******** ******** *** *** ******.

******* ** ** **** **** **** pushing ***** ******* ******* **** ********* chips *** ******* **** *** **** cybersecure ******** ** *** ******.

**** **** ** ***** ** *-* years **** **** *** ***** **** underneath ****. ** ***** ** **** will ** ****-*** ** ****.

Agree: 2
Disagree
Informative: 1
Unhelpful
Funny

Undisclosed Manufacturer #8

06/26/20 03:45pm

*** ******* ******** ****** ******* ******* this **** *** * ******** **** and ******* **** * **** ***** Sales *****. * ******* ***** ** minutes ***** *** **** *** ** talk ***** *** ***** **** ***, how **** ********* **** **** *** how **** ****** ****** ** *** the *******.

**** * **** **** ** *** include **** ******* *** *** ****, I *** **** **** ****** **** still **** ******* ** ** ***** the **** ** *****-*******.

#***************

Agree: 4
Disagree
Informative
Unhelpful
Funny: 2
Avatar

Ross Vander Klok

IPVMU Certified | In reply to Undisclosed Manufacturer #8 | 06/26/20 06:25pm

* ***** ** *** ******* "**** car *****" **** ** *******. ***** frankly * *** ******* ********* ** it. *******, ********** ****** ***** ****** wise, ********** **** *** **** *** polished, **** *** * ******** ******** and ** *** *** *** **** any ****** ** ***** ** **** to ** ****** **.

** *** **** * ***** ** the ******** **** ***** **** ****** and ******* ** *** *** **** thing ***** ****** ***** **** ****** they **** ******* ***** ****** ** first ***** ****** ***** **.....

Agree
Disagree
Informative
Unhelpful
Funny: 3
Avatar

Daniel Tyrrell

06/26/20 05:09pm

***** * ***'* ******** **** ******** anyone *** **** ***** ****, ** aren't ******* ***** ****** ********.

*** ** *** ***** ****? *** do ******** ******* ********* ****? ** they **** **** **** **** **? Do **** ****? **** ******, *** that's *** *** ********.

Agree: 6
Disagree
Informative
Unhelpful
Funny

Undisclosed Manufacturer #9

06/26/20 06:16pm

*** ****** **** ** ******* ******** asset **** *** ** ***** ********* on ** ******** ********** ** ******* is ** **** *** ********** ** enterprise ********** **** * ******** *** reliability **********.

Agree: 1
Disagree
Informative
Unhelpful
Funny
Avatar

Spencer Cayer

06/26/20 06:33pm

******* ****** **** * *********** ***** system **** **** *** ******* ******** would ** * ****** **** ** swallow; ********** ** *** ***** ***** they *** ********. ****** *** ** the **** **** ******* *** * bad ****.

Agree: 1
Disagree
Informative
Unhelpful
Funny

Undisclosed Integrator #10

06/27/20 03:14am

**** **** **** **** *** ********* not ** *** **** ********, **** have **** **** *** * **** time ** **** ******* ***** *********** who ***** ********* * ****** ** their **** *** *** ******* ***** they *** ****** ****** *** ****** rookie ******** *** ***** ** ******** security ****** ** *** *******, *** all **** **** ** ** ** sell, ****, ****. **** *** ** their ***** **** ** *** ****, the **** *** **** **** *** changes ** ** ******* ***** *** says "*'* ***** ** ******** * amount ** ******* *** **********, * want **** ******* ** **". ************* for ****, **** ***'* ********** **** they *** ******* *********** *** **** in *** ******** ********, *** ****** their *** ******* *** *** *** looking ** ********* *********. **** **** to **** ******** **** **** *** a ******** ******* *** **** **** a ******** ********...............***** *** *** **** will *** *** ***** **** *** security ******** ** * ***** ********* animal..

Agree
Disagree
Informative: 2
Unhelpful
Funny: 1
Avatar

Daniel Tyrrell

In reply to Undisclosed Integrator #10 | 06/27/20 06:48am

**** ***'* ********** **** **** *** loosing *********** *** **** ** *** security ********, *** ****** ***** *** dealers *** *** *** ******* ** different *********.

***** **** ** ********** *** ***'* care ******* **** *** ***** ****** money. ***** *** ***** ***** ******* is ****'** ********* **** *** "***********" members ** *** ******** ********, ***** has **** ********* *** ****** *** haven't **** ***** ** **. **** and **** *** ******** ****** *** being *** ** ****** ** ********. Mostly ** ******. *** ** ***** and ******** ***** ****** ** ****** tight, *** **** *** ** ****** different. ** **** ************, ****** ** do *** **** *****, **** ** different ******* ** *** ********. *** so **** *** **** **** *****, even ***********.

*'** ****** **** ******* ** **** typical ** *******. ********* ** ****** seem ** ****, ** ******* ** the **** **** ******** ** **** sales *** *****. ** ****** ***'* always ***** ********. **** ****** ***** threat *** ** ******* ** * firewall ****, ** **** ************. * am ************ * ***, *** * am ****** *** **** *** ***. The ****** ** ** ****** *'** seen ** ** *** **** ****** prop ***** ****, *** ****** **** rooms ******* ********, **** ***** *** critical ************** ***** (**** *******/*****).

******** **** ***** ** ** ******* Verkada, *** *'* *** *** ** say **** ****'* ** *****, *** I ***'* ***** *** ***** ****** land ****** ** ****. ** ** the ******** ******** **** ***** ***** the ******** ** ******* *** * long ****. *** ** **** ***** continue ** **** **.

** **** ****** ** **** ********* we *** ****** **** ******* ******* we *** ****, *** *** ****'* survey **** ** ***'*. ** ** we **** ******* ** *** ******, maybe ** **** ** *** ****** first. ******* ******. ******* ********* ******* you **** *** * **** *** of ** ** ***. **** *** results **** * ** ******, **** of ****** *** **** ******* **, but **** *** ** ******* ** customers ***'* **** ** *** *** extra *** ****. ** ** ***'** already ***** **** **** **** *** customers, *** ***** ******* ** *** different?

* *** ****** ****-******* **** **** first ****** **. ***** ****** *** a **** ***, *** ******** ** see * *** ** ********* **** people ******* **** ***. ***** * bit ** ********, * ***'* ****.

Agree: 6
Disagree
Informative: 3
Unhelpful
Funny

Randy Lines

06/27/20 05:13pm

*** ******** ******** ***** ******** ** folks ***** **** * *** **** credibility ** **** ** ******* ** readers ** *** ***** **** * simple ****** ****** ** ******** *** BLE ******. * ***** *** ****** will ** **** ******** ** *** reader. ****** ** *** *****. ******** down-time ******* ** *** ****** ** opposed ** *** **** **********.

***

Agree
Disagree
Informative
Unhelpful
Funny

Undisclosed Distributor #12

In reply to Randy Lines | 06/28/20 10:14pm

* ******** *****. *** ****** **** is **** ** *** ****** ***** the ******** ** *** ******, **** the ******* ***** (*****) **** **** typically ** ** *** ******. ** that ** ** **** **** **** the ****** *** *** **** & you **** ****** ****** ** *** lock ***** & **** *** **** the ****.

Agree
Disagree
Informative
Unhelpful
Funny

Undisclosed #5

In reply to Undisclosed Distributor #12 | 06/29/20 01:20am

@**** -- ***** *** ****** ** systems **** ***** ****** ***** ******* so *** ***** ** *** ** the *********** ******. ****** ***** ********* is * ***** **** ****** ** you *** ***** ** ****** **** from *** **** **** *** ********* wiring ** **** *****.

**** ***** ****, ***** *** **** cases **** **** *** *********** ******, some **** *** **********. **** ** to *** * ******** ****** **** supports **** ************ *******.

Agree
Disagree
Informative
Unhelpful
Funny

Undisclosed Distributor #12

In reply to Undisclosed #5 | 06/30/20 06:06am

**** ** ****, ** **** **** them, ******* ** ** **** ******* bit ** **** **** **** ** mounted *******. * ********* **** ***** get ******* ** *** **** ****** behind *** ******, **** **** ** pull *** *** **** ***. **** in ******* *** ****** ****** *** NOT ********* **** *** ******* ****** to *** ***** ******. **** ********* just **** ** '****' *******.

Agree
Disagree
Informative
Unhelpful
Funny

Undisclosed #5

In reply to Undisclosed Distributor #12 | 06/30/20 06:52am

**** ****.. **** *** * ************ to **** ****** *************. *** *** what **'* ***** ** ******* *** previous **** **** ********* ************* ** the ****** *****, ********* * ******'* call ** ****** ****** :)

Agree: 1
Disagree
Informative
Unhelpful
Funny

Undisclosed Integrator #13

06/29/20 08:56am

**** ** *** **** ** *** Industry ****? ********* ** ******* ** are *** "*********"!!

Agree
Disagree
Informative
Unhelpful
Funny
Avatar

Travis Willis

07/01/20 02:56pm

* ***** *** ***** **** ** lost **** ** **** *******'* ******** and ****** ********* ** *** **** most **********'* **** *** ******* *** how ** **** **. **** ** the *********** ***** *** ***** ** is *********. **** *** ********* **** customers ********. ******* *****'* **** ** need **********'* ***********, **** **** ********** and **** ** * *** **********. I **** ** *** ** ** suck ** ** ******** ** *******. They ********* **** ** * *** deficiency *** *** ********** **.

**** **** ******* *** ******** *** they **** **** **** ******* **** do *** ******. ***** **** **** one *** ****** ** ****** *** brand **** *** *** ***** ** listen ** ** "*********". *** **** would ** ****** ***** ******* *** traditional ************* ******** ** *** ***** asses ** **** *** *** ** products ** *** ******* **** ** a ******* *******, ********* ** **** all ** ********** *** *******...** ****** or ******.

Agree: 1
Disagree
Informative: 2
Unhelpful
Funny: 1

Undisclosed #15

07/06/20 01:29am

**** ****** ****** * ********** ***. It's * ***** **** *** ********* to ***** **** **** ****** ******* have ******, ***** **** *** ******* adapt. **** ********* ** *********** ***** R&D.

Agree
Disagree
Informative
Unhelpful
Funny: 1

Undisclosed Manufacturer #16

07/22/20 02:29am

* ****** ** '** ***** ****** when * ******** **** **** *** wave ** *** ****** ** ******* with *** ******** *****. * ***** it *** ** *** *** ******* flaw, * * ***** ********* ************.

*** **** **** *** '** ****** had * * ***** *** *** rest ** *******.

***'* ******* **** *** *********. ***** guys *** ***** *** ****. ***** access ******* ************ ***** *** ********** and **** *** ***** ***** *** game - ****, ********* *** *** Motorola.

*****'* ***** * **** ***** **** through *** *********** ******* **** * lot ** ********* *** **** ******* folks *** **** *** ** *** to ************* *** ***********.

Agree
Disagree: 2
Informative
Unhelpful
Funny
Login to read this IPVM report.
Why do I need to log in?
IPVM conducts reporting, tutorials and software funded by subscriber's payments enabling us to offer the most independent, accurate and in-depth information.
Loading Related Reports