Grey Noise Intelligence Discovers Zero-Day Vulnerabilities in Live Streaming Cameras with the Help of AI
Summary: GreyNoise Intelligence announced on October 31, 2024 that its internal LLM, Sift, flagged unrecognized traffic patterns that led researchers to two previously undisclosed zero-day vulnerabilities in live streaming cameras. Tracked as CVE-2024-8956 and CVE-2024-8957, the flaws affect NDI-enabled pan-tilt-zoom cameras from PTZOptics, Multicam Systems SAS, and SMTAV Corporation, and could let attackers take full control of the cameras, view or manipulate video feeds, disable operations, or enlist the devices in a botnet for denial-of-service attacks.
Key Takeaway: These cameras sit in telehealth sessions, government settings, and houses of worship, so a compromised feed is also a potential entry point into the broader network behind it - and PTZOptics has already shipped firmware that users are being told to apply immediately.
Read the original at GreyNoise Blog ↗
- Topics
- Detection & Response
- Mentions
- CVE-2024-8956CVE-2024-8957
- Related
- Storm⚡️Watch | Cyber Podcast | Disney Menus Hacked, Pacific Rim APT Campaign Exposed, and Zero-Days Found Using AI Cyber Risks ·Grey Noise Intelligence Discovers Zero-Day Vulnerabilities in Live Streaming Cameras with the Help of AI | Grey Noise Blog Cyber Risks ·CVE-2024-8957: PTZOptics PT30X-SDI/NDI Cameras OS Command Injection Vulnerability Known Exploited Vulnerabilities · Nov 04, 2024