Default Credentials in Brickcom Cameras Allow Unauthenticated Access

Compliance Impact

The vulnerability allows unauthenticated remote attackers to silently access live camera feeds, potentially exposing sensitive visual information without detection.

Such unauthorized access to sensitive data could lead to non-compliance with data protection regulations like GDPR and HIPAA, which require safeguarding personal and sensitive information against unauthorized access.

However, the provided information does not explicitly discuss the impact on compliance with these or other common standards and regulations.

Useful 0 Not Useful 0

Detection Guidance

This vulnerability involves Brickcom cameras using default credentials that allow unauthenticated remote access to camera feeds.

Detection can focus on identifying Brickcom camera devices on the network and checking for default credential usage.

• Scan your network for Brickcom camera IP addresses using tools like nmap.
• Attempt to access the camera feeds remotely using known default credentials to verify if unauthorized access is possible.
• Monitor network traffic for unusual or unauthorized access attempts to camera devices.

Specific commands might include:

• nmap -p 80,554 --open -sV <network_range> # To find devices with HTTP or RTSP ports open, commonly used by cameras.
• curl http://<camera_ip>/ # To check if the camera web interface is accessible.
• Attempt login with default credentials on the camera interface or RTSP stream.

Useful 0 Not Useful 0

Mitigation Strategies

Immediate mitigation steps include isolating the affected Brickcom cameras from the internet to prevent remote unauthorized access.

Use firewalls to restrict access to the cameras only to trusted networks or devices.

Employ secure remote access methods such as VPNs to control who can reach the camera feeds.

Contact the vendor for support and updates, although Brickcom has not responded to coordination requests so far.

Useful 0 Not Useful 0

Executive Summary

This vulnerability involves Brickcom cameras that come with default credentials. These default credentials allow any unauthenticated remote attacker to silently access the camera feeds without needing to log in or provide any authentication.

Useful 0 Not Useful 0

Impact Analysis

The vulnerability can lead to unauthorized remote access to live camera feeds. This means attackers can silently monitor video streams without permission, potentially compromising privacy and security.

Useful 0 Not Useful 0