Grey Noise Intelligence Discovers Zero-Day Vulnerabilities in Live Streaming Cameras with the Help of AI | Grey Noise Blog
Summary: GreyNoise's honeypot caught an automated zero-day exploit being run across the internet, and its internal AI tool Sift flagged the unrecognized traffic, leading researchers to two previously undisclosed vulnerabilities in NDI-enabled pan-tilt-zoom cameras. The flaws, tracked as CVE-2024-8956 and CVE-2024-8957, affect VHD PTZ camera firmware below 6.3.40 used in PTZOptics, Multicam Systems SAS, and SMTAV Corporation devices based on Hisilicon Hi3516A V600 SoC V60, V61, and V63, and were disclosed with VulnCheck; only PTZOptics responded and released firmware updates.
Key Takeaway: An exploited camera can be taken over completely, its video feeds viewed or manipulated, and the device enlisted into a botnet for denial-of-service attacks - in environments the source lists as industrial operations, healthcare, and houses of worship. With nearly 19 billion IoT devices in operation globally, the exploit that hit GreyNoise's sensors was built and automated to run broadly, and the vendor response covered one of the three named manufacturers.
Read the original at GreyNoise Blog ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2024-8956CVE-2024-8957
- Related
- Storm⚡️Watch | Cyber Podcast | Disney Menus Hacked, Pacific Rim APT Campaign Exposed, and Zero-Days Found Using AI Cyber Risks ·Grey Noise Intelligence Discovers Zero-Day Vulnerabilities in Live Streaming Cameras with the Help of AI Cyber Risks ·CVE-2024-8957: PTZOptics PT30X-SDI/NDI Cameras OS Command Injection Vulnerability Known Exploited Vulnerabilities · Nov 04, 2024