Ethical Hacking News
A global surveillance system has been compromised due to a vulnerability in Easy4IP, a cloud-based service provided by Dahua. Attackers have been able to remotely access IP cameras and video recorders, viewing live video and changing settings. This vulnerability has left many organizations and individuals vulnerable to cyber attacks. According to the Ukrainian cyber incident response team CERT-UA, four steps can be taken to mitigate the risk: turning off P2P and cloud access, keeping cameras off the internet, regularly updating software, and reporting any signs of unauthorized access. The discovery of this vulnerability highlights the importance of prioritizing security in global surveillance systems.
Easy4IP vulnerability in Dahua cameras and video recorders has been exploited, compromising global surveillance systems. Attackers can access devices remotely using the serial number and bypassing NAT and firewall protections. Common passwords or outdated firmware can be exploited to gain unauthorized access. Four steps to mitigate the risk: turning off P2P and cloud access, keeping cameras off the internet, and regularly updating software. The discovery highlights the importance of securing global surveillance systems and the need for manufacturers to prioritize security in their products.
The security of global surveillance systems has been compromised, as attackers have successfully exploited the Easy4IP vulnerability in Dahua cameras and video recorders. The Ukrainian cyber incident response team CERT-UA has warned about unauthorized remote access to IP cameras and video recorders, which have been made accessible through Easy4IP, Dahua's cloud feature.
Easy4IP allows users to access devices remotely, and once a user knows the serial number of the device, they can access it through the cloud without needing an open port or a public IP address. This means that even a camera that isn't directly exposed to the internet can still be at risk. The main vector of attack is the P2P/cloud access function, which bypasses NAT and firewall protections.
Attackers have been able to guess serial numbers automatically and check which devices are registered in the cloud. Once connected, they need to get past the login, which can be done by trying common or weak passwords or exploiting security flaws in outdated firmware. There are three signs that a device may have been compromised: unfamiliar accounts, changed settings, and audit logs indicating access through the cloud service.
To mitigate the risk, CERT-UA recommends four steps: turning off P2P and cloud access if not in use, keeping cameras off the internet, and regularly updating software to the latest version. Organizations are advised to check all Dahua devices on their networks and report any signs of unauthorized access to [email protected].
The discovery of this vulnerability highlights the importance of securing global surveillance systems and the need for manufacturers to prioritize security in their products. As the use of cloud-based services continues to grow, it is essential to address the risks associated with them.
Related Information:
https://www.ethicalhackingnews.com/articles/Global-Surveillance-System-Compromised-Easy4IP-Vulnerability-Leaves-Dahua-Cameras-and-Video-Recorders-Exposed-ehn.shtml
https://securityaffairs.com/201827/hacking/attackers-take-control-of-dahua-cameras-and-video-recorders-via-easy4ip.html
Published: Tue Oct 27 08:27:07 2026 by llama3.2 3B Q4_K_M
