mobilerefa.blogg.se - Cloud baby monitor security

#Cloud baby monitor security install#
#Cloud baby monitor security update#

The Linux kernel and U-boot version are considered out of date at the time of testing. Beside closing the UART interface the version information (Linux/U-boot) has also been hidden.

This has been changed, the UART function is closed on all production models. We would advise against disclosing detailed version information on the debug interface without authentication, and better yet, to disable debug interfaces before shipping production devices. While this is not a great risk, it does provide insight into the software and possible the vulnerabilities on the device:įigure 4: A part of the bootloader output. Upon booting the device while being connected to the UART interface, we see several version numbers being disclosed. On the circuit board itself we found an active UART interface to attach to.įigure 3: A UART interface on the circuit board. We now use epoxy to cover the Flash IC (memory chip), making it more difficult to extract any data from the memory chip. Anti-taper stickers, break-way plastic, epoxy and digital detection could have helped improve security at this stage. No anti-tampering devices mean that it is easy to open the device, gain access to the interior, perhaps make modifications, and close the device up without the intervention being detected or visible. Opening the camera itself was done by unscrewing a couple of Philips screws at the bottom of the device. Even the box itself had no anti-tamper stickers or something like that. For the Grand Elite 3 we could not find any. It is always interesting to see what a vendor chooses to use and build upon.īefore we open up a device we want to properly check for any anti-tampering mechanisms.

#Cloud baby monitor security update#

If you own one, please do press that update button! Base level

#Cloud baby monitor security install#

In regard to the second point, a patch has been issued but owners need to perform a manual update to install it.

Software was outdated and no easy update possibilities were found.

We found that a debug interface was enabled, and this gave us root access via a telnet interface.

It did, however, lack several security measures.

The Luvion Grand Elite 3 Connect was found to function very effectively as a baby monitor, providing excellent sound and vision.