"If You Have One at Home, Check It Now": IP Cameras Raise Privacy Concerns

KISA and Korea Consumer Agency assess IP cameras
Security vulnerabilities found in 10 products on the market
Manufacturers urged to fix flaws that could expose users' privacy

Security vulnerabilities have been found in some IP cameras sold on the market, potentially allowing outsiders to leak recorded footage or remotely control the devices.

The Korea Internet & Security Agency (KISA) said on November 12 that, together with the Korea Consumer Agency, it had assessed the security of 10 IP camera products sold on the market and recommended that manufacturers of products with identified vulnerabilities make improvements.

IP cameras are Internet of Things (IoT) devices that connect to a network to let users view live footage remotely. If their security is inadequate, they can pose a risk to privacy, including through leaked footage.

KISA selected 10 IP camera products based on factors such as their sales rankings on online shopping malls and the results of consumer surveys.

The assessment covered a total of 37 items across three areas: devices, including hardware, networks and firmware; mobile apps used to control and configure IP cameras; and policies and management, including manufacturers' security update policies and privacy policies.

In the device category, exposed test terminals were active in four products, posing a risk of system access and information leaks, while user data could be leaked during transmission for eight products. All products were found to have vulnerabilities stemming from inadequate firmware security settings.

In the mobile app category, five products needed improvements because they did not apply a secure password policy. In the policies and management category, six products were found for which it was difficult to verify the period of security update support.

In particular, the assessment found that three products had inadequate user authentication procedures. These products had security vulnerabilities that could expose users' privacy, allowing attackers to download images and videos captured by other people's IP cameras without authorization or forcibly activate and control camera functions.

KISA promptly recommended that the manufacturers of the three products with vulnerabilities that could lead to privacy breaches make improvements. Remedial measures have been completed for two products, while work is underway on the remaining product.

The manufacturers of all 10 products submitted quality improvement plans to the Korea Consumer Agency based on the assessment results, and KISA plans to continue monitoring whether the plans are implemented.

Lee Yong-pil, head of KISA's Digital Threat Prevention Division, said, "We will work with relevant agencies to proactively identify and address security vulnerabilities in digital products used in everyday life and create a digital environment that people can use with confidence."

This content was produced with the assistance of AI translation services.