Experts from the Kaspersky Global Research and Analysis Team (GReAT) identified a security flaw in IP surveillance cameras manufactured by Intelbras. The vulnerability stems from an insecure firmware update mechanism that lacks authentication, allowing unauthorized remote access.
Attackers can trigger a forced reboot by sending a specific request, causing the camera to go offline for approximately one minute. By repeatedly sending these requests, malicious actors can keep the devices disabled indefinitely, effectively blinding the surveillance system.
The vulnerability affects several models, including iM3B-C, iMX C, iM4 C, iM5 SC, iME 360 C, and iM7+ FC. The Intelbras management application, which has over 4 million downloads, is primarily used by customers in Brazil and other South American countries.
Kaspersky notified Intelbras of the issue, and the manufacturer has since released a firmware update to address the flaw. Tatiana Shishkova, acting head of Kaspersky GReAT in Latin America and Europe, advised users to update their devices to the latest version.
