3 ms·

CVE-2020-24215. Full administrative access with hard-coded password: https://kojenov.com/2020-09-15-hisilicon-encoder-vulnerabilities/#backdoor-password-cve-20

by yokaze 6y ago

CVE-2020-24215. Full administrative access with hard-coded password: https://kojenov.com/2020-09-15-hisilicon-encoder-vulnerabilities/#backdoor-password-cve-2020-24215 https://kojenov.com/2020-09-15-hisilicon-encoder-vulnerabili... Commonly known as backdoor.

a1369209993 6y ago
They're not claiming it's not a backdoor; they're claiming the backdoor is not in "HiSilicon based hardware video encoders", but rather in management software associated with said encoders. The former would be near impossible to fix, whereas the latter can (supposedly) easily be replaced. Edit: to be clear: 1, I don't know that the backdoor isn't in the hardware itself, but that's what they're claiming. 2, it sounds like the software in question is the manufacturer-provided drivers for the hardware, which is worth emphasizing, but not the same as the hardware itself being compromised.
Yc4win 6y ago
Exactly. I see the usual suspects are dancing around the fact since it's Chinese.