3 Vulnerabilities Found on AvertX IP Cameras
Summary: On February 24, 2020, Palo Alto Networks Unit 42 researchers found three vulnerabilities in AvertX IP cameras, models HD838 and 438IR, running the latest firmware. The flaws let attackers enumerate valid usernames through differing login responses, keep using the default admin/1234 password without enforcement, and reach an exposed UART interface that gave a Uboot prompt with no username or password required.
What you should know: Unit 42's 2020 IoT Threat Report found security cameras are only 5% of enterprise IoT devices but account for 33% of all security issues, and these cameras are rebranded Hikvision units deployed outdoors where physical access to that UART connector is part of the threat model.
Read the original at Unit 42 Palo Alto Networks ↗
- Topics
- OT / ICS & Critical Infrastructure
- Related
- Siemens RUGGEDCOM APE1808 Cyber Risks · Nov 12, 2026How to Assess OT Incident Response Preparedness Cyber Risks · Nov 10, 2026Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem Cyber Risks · Nov 10, 2026