8

I was thinking about bringing my Foscam FI8910W back into service (assuming it still works), but I've just come across this rather extensive vulnerability disclosure list. I was wondering if there was any trustworthy replacement firmware - maybe openipcam but then I wonder if people have being working on replacement firmware why these zero-days haven't been identified earlier.

Generously, I'd be dubious about hoping the replacement firmware was any improvement over the stock firmware.

  • What's the current version of your camera's firmware? – Helmar Mar 13 '17 at 15:07
  • @Helmar 11.22.2.46 - about 3 years old... – Sean Houlihane Mar 13 '17 at 15:18
6

You should go with updated firmware, yes. In most cases this is a good idea when you have known vulnerabilities and old firmware (remember there will be more vulnerabilities you don't know about!).

Even if they weren't working on those specific vulnerability fixes, different firmware may have removed some of them anyway, and discovery of new vulnerabilities takes time.

As to your point about identifying zero days - it's generally not something the openipcam folks would have looked at specifically. There will always be vulnerabilities, and many are hard to find. Once found they can be fixed, but up to that point coders will focus on the improvements they are paid to make, hence the popularity of bug bounty programmes.

  • 2
    I don't think there is any point using the manufacturer's firmware in this case, since the disclosure suggests it's backdoored. – Sean Houlihane Mar 28 '17 at 15:52

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.