Survision LPR Camera Missing Authentication Vulnerability

A vulnerability exists in the Survision License Plate Recognition (LPR) Camera system due to the absence of default password protection. This flaw allows immediate access to the configuration wizard without any login prompt or credential verification. All versions of the Survision LPR Camera are affected.

Impact

Exploitation of this vulnerability could lead to unauthorized access to the camera's system and configuration settings, allowing for potential manipulation or misuse of the camera's functions.

Remediation

Users are advised to update to Survision LPR Camera firmware version 3.5. For previous versions, activate the 'lock' password in the security parameters and, where possible, enforce client certificate authentication. For more information, contact Survision.