In Panama Millions of Security Cameras May be at Risk Due to a Vulnerability.

Kaspersky researchers discovered a vulnerability in several Intelbras security camera models, whose vulnerable software has accumulated more than four million downloads in Latin America, affecting users in Brazil, Paraguay, Ecuador, Colombia, Argentina, Chile, Peru, Bolivia, Uruguay, and Venezuela. 

The flaw could allow an attacker to temporarily disable cameras, preventing owners from accessing live footage or managing the equipment. This could leave homes and businesses unmonitored at critical times, making it easier for incidents like burglaries to go undetected while the cameras are down. Intelbras has already patched the vulnerability and released an update to protect affected devices. The flaw affects the iM3B-C model and the iMX C, iM4 C, iM5 SC, iME 360 C, and iM7+ FC models, which are compatible with the vulnerable software version.

The problem lies in the mechanism the cameras use to update their firmware —the software that controls their operation. Under normal circumstances, this process should verify that the update request comes from an authorized source and that the received file is valid. However, researchers identified that the affected devices were not performing these security checks before initiating the process.

This vulnerability could allow an attacker to remotely reset a camera and leave it disconnected for approximately one minute. During that time, the device would appear offline to both its owner and anyone else who has it registered on their phone or other device.

Although a minute may seem like a short time, in a video surveillance system it represents a period during which users cannot access live images or control their cameras. Furthermore, attackers could send repeated requests to keep the devices offline indefinitely. This could leave homes and businesses unmonitored for as long as cybercriminals deem necessary—for example, to facilitate a robbery without the cameras recording the event.

The good news is that the vulnerability has been patched. After receiving notification from Kaspersky, Intelbras took the necessary steps and released a software update. Therefore, users are advised to check the version installed on their cameras and ensure they have the latest update. 

To help users avoid risks associated with internet-connected devices such as security cameras, experts recommend the following:

Protect your internet-connected devices: use a security solution.

Check if you have any of the affected models and make sure you have the latest software version installed.

Keep all internet-connected devices, including cameras, routers, and other smart equipment, up to date to reduce exposure to known vulnerabilities.