21,786 Home Cameras, No Password, No Warning

Key Points:

• Over 21,786 home cameras are streaming live video without any authentication, exposing users to significant privacy risks.
• The lack of password protection primarily affects budget camera models, with devices like webcamXP showing open streams 45.6% of the time. This vulnerability allows unauthorized access to personal spaces without any hacking required.
• Recommended actions include setting strong passwords, disabling UPnP on routers, turning off unnecessary RTSP streams, updating firmware, and removing outdated devices from the internet.

Technical Details: The report highlights that many of these vulnerable devices use the RTSP protocol for streaming, which lacks an authentication layer, making them easily accessible. The findings indicate that the issue stems from manufacturers not enforcing password setup during initial device configuration.

MITRE ATT&CK Techniques: None mentioned

IOCs Mentioned: None mentioned