The issue appears to be restricted to system firmware version.
This could be inconvenient, especially since many of these cameras are set up so they can be monitored remotely, so their owners might not immediately have physical access to them. In this happens, the camera owner might need to restart the camera by powering it down and back up, he said. However, this has the downside of exposing the camera to denial-of-service attacks.Īccording to Kennedy, there's a second bug that causes the camera to freeze after a certain number of failed attempts to access the camera without a user name and password.
This will give the remote user Visitor privileges and allow them to access video streams with or without audio, take snapshots and execute any CGI commands available to the Visitor access level.Ī workaround is to manually configure user names and passwords for all eight user ID fields, Kennedy said.
#Foscam default password password#
The rest are blanked out and have the Visitor privilege assigned by default.Īccording to Kennedy, if any of the eight user slots is left empty - with no username and password configured - it's possible to access the camera by simply hitting OK on the authentication prompt. The user administration interface has eight user ID fields, but only one of them is configured by default with user name "admin" and privilege Administrator. Kennedy tracked down the problem to the software's user management system.įoscam MJPEG cameras support as many as eight separate user accounts with different privileges: Administrator, Operator and Visitor.
#Foscam default password software#
A regular forum user and software developer named Don Kennedy who uses the nickname TheUberOverLord subsequently investigated the issue and concluded that other indoor and outdoor camera models from Foscam's MJPEG series have the same issue.
0 kommentar(er)
