A software vulnerability dubbed "Devil’s Ivy" could affect tens of millions of internet of things (IoT) systems such as security cameras in banks, according to IoT security start-up Senrio. It found the flaw, a stack-based buffer overflow, in a camera manufactured by Axis Communications, a major security camera manufacturer. The flaw is not limited to just one camera, but affects all models made by Axis. Senrio has issued a technical advisory, alongside Axis, which said it would take a "skilled and determined attacker" to exploit the flaw and has released a patch for the bug.
A software vulnerability dubbed "Devil’s Ivy" could affect tens of millions of internet of things (IoT) systems such as security cameras in banks, according to IoT security start-up Senrio. It found the flaw, a stack-based buffer overflow, in a camera manufactured by Axis Communications, a major security camera manufacturer. Senrio said: "When exploited, [the vulnerability] allows an attacker to remotely access a video feed or deny the owner access to the feed." Senrio has issued a technical advisory, alongside Axis, which said it would take a "skilled and determined attacker" to exploit the flaw and has released a patch for the bug.