What to Expect When You’re Exploiting: 0Days, Baby Monitors & Wi-Fi Cams
Uncovers zero-day vulnerabilities in cloud-connected Wi-Fi cameras and baby monitors, demonstrating remote code execution via flawed P2P protocols.
Summary
Cloud Connected Camera Attack Surface
Consumer Wi-Fi cameras and baby monitors provide convenient remote video monitoring through mobile and cloud interfaces. However, the affordability of these IoT devices often correlates with flawed security implementations that expose end users to serious privacy risks.
Local Root and Management Platform Exploitation
Exploration of multiple camera models revealed methods to obtain local root access on target devices. Additionally, researchers identified a zero-day vulnerability in a widely used IoT device management platform that allows unauthorized remote access and control across millions of deployed cameras worldwide.
Unauthenticated Remote Code Execution via P2P
Analysis of the underlying peer-to-peer (P2P) networking protocols demonstrated an inherently flawed implementation. Attackers can leverage these protocol flaws to achieve unauthenticated remote code execution and intercept live camera feeds without valid credentials.
Remediation and Secure Deployment
Securing home surveillance devices requires patching firmware flaws, restricting cloud management permissions, and isolating camera traffic on segmented local network VLANs.
Related talks
Creator Stage·43 min
Zoltan Balazs
Surveys pervasive architectural and implementation failures in consumer IoT gadgets, highlighting cleartext credentials, command injections, and insecure defaults.
Creator Stage·26 min
Alexandru Lazar
Demonstrates remote code execution vulnerabilities in popular Dahua perimeter surveillance cameras discovered through firmware key extraction.
Main Stage·21 min
Noam Moshe
Demonstrates remote code execution and edge compromise across Axis enterprise IP cameras, turning surveillance devices into offensive pivot points.