#Raysharp dvr pro

You can tell by the user interface which is exactly the same across many brands such as HD iDVR, Everfocus, Everest, Sansco, Luxvision 5716, 6008T-EL, HA-1648, CP-Plus, Citrox, BB-4CH, Yoko, TVT, Super Live Pro DVRs and other generic brands simply named вЂњH.264 network, H.264 DVRвЂќ.В If your DVR has a login screen similar to the one shown below, then most likely itвЂ™s a H.264 generic DVR. Hopefully, those with vulnerable DVR systems will discover the issue and take precautionary steps to avoid unwittingly sabotaging their own efforts to make their property or possessions safer.A lot of the recorders on the market are generic DVRs manufactured in China and in many cases re-branded by third party companies. With the recent revelation that many webcams had been unwittingly exposed publicly online, it is likely that the same may occur for these DVRs. They recommend that any DVR that uses the username and password combination of root and 519070 should not be accessible on the internet and if access is required, it should be done by first logging into a VPN. Another CGI script found in RaySharp firmware listed 55 vendors that apparently use the same firmware, so the impact could be much greater.ДЇor those in possession of a DVR system from Raysharp or one of the other affected firms, RBS researchers chose to release information on the vulnerability, so that they can check for themselves whether their system possesses the issue. That RaySharp still use hard-coded root passwords would be bad enough, but the Chinese firm also manufacture DVR products and provide firmware for a number of other companies worldwide with RBS researchers finding that at least some of the DVR products from KГ¶nig, Swann Communications, COP-USA, KGUARD Security, Defender and LOREX Technology, contain the same hard-coded root password. Such things are now considered to be unacceptable by most, with many vendors developing secure systems and working to ensure vulnerabilities that do pop up are patched. Using hard-coded passwords for small-scale systems used to be an accepted practice, where physical access to the system would generally be required regardless.

#Raysharp dvr full

Using these credentials to log into the web interface would provide full system access. These web interfaces all run on a Linux OS based firmware, which on examination of the CGI scripts that manage the user authentication of the web interface a routine was found that checks to ensure the user-supplied username is вЂњrootвЂќ and the password is вЂњ519070вЂќ. RaySharpвЂ™s DVR products have a web interface through which a user can view the camera feeds, manage settings and recordings and operate any pan or zoom features on the cameras.

#Raysharp dvr software

The vulnerability was discovered by security researchers fromВ vulnerability intelligence firm Risk Based Security (RBS), who examined the software that the DVRsвЂ™ interface runs on. Now as many as 46000 users of digital video recorders (DVRs) manufactured byВ Zhuhai RaySharp Technology may actually be making their property less secure, with it coming to light that the Chinese manufacturer has been using hard-coded unchangeable passwords for the highest user privilegesВ in their software.

The security of devices that are internet accessible has become more and more critical in recent years.В Recently cheap unsecured webcams have come under fire after many such devices were exposed by the Shodan search engine.