3 ms·
Sorry, this article isn't worth reading. The analysis done here is worth nothing - it's just dumping the firmware and running an automated tool to find known vu
by denysvitali 3y ago
Sorry, this article isn't worth reading.
The analysis done here is worth nothing - it's just dumping the firmware and running an automated tool to find known vulnerabilities.
Those chinese IP cameras have far more interesting vulnerabilities that are worth discussing, but this article is completely ignoring them.
For example, these cameras generally expose themselves to the internet, phone back home in HTTP and have backdoors in multiple places (e.g: root credentials [1], web interface backdoors and such)
On top of that, the SOC is not introduced and the author just says "ESP-based chip". I really doubt this camera is using an Espressif chip: Espressif is not used for video processing. If I had to guess, it's probably a Goke chip, or one of the many vendors mentioned in OpenIPC supported HW page [2].
[1]: https://gist.github.com/gabonator/74cdd6ab4f733ff047356198c781f27d https://gist.github.com/gabonator/74cdd6ab4f733ff047356198c7...
[2]: https://openipc.org/supported-hardware/featured https://openipc.org/supported-hardware/featured