Cybersecurity Nozomi Networks Labs, a specialized security company focused on Industrial Control Systems (ICS) and OT/IoT security, has found a flaw that cameras client service does not perform certificate validation. The manufacturer has released patch firmware for the flaw, please refer to the manufacturers report for details and workarounds.
Weakness
The product does not validate, or incorrectly validates, a certificate.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Xno-9082rz_firmware | Hanwhavision | * | 2.24.00 (excluding) |