IP2M-841B with backdoor?

[Tungsten E2]

How to find out if IP2M-841B is affected by Dahua backdoor?

http://blog.nsfocusglobal.com/categorie ... -solution/

[jantman]

It seems like a lot of the original information about this vulnerability has been taken down (note it's now quite old - it was announced over a year ago) but it was quite well-publicized, including viaKrebs on Security and ThreatPost. There's a free online checker for cameras with public IPs (eek! scary!) here and the proof-of-concept code can be found on Exploit DB. There's also a post on IoTsploit's blog about it.

I checked two cameras that I just bought last week - IP2M-841B (2.520.AC00.18.R, Build Date: 2017-06-29) and IPM-723W (2.400.AC02.15.R, Build Date: 2017-07-31) - and they're both reporting as being patched.

[Tungsten E2]

Where did you get your fw? My version is IP2M-841B-EGD-DE 2.420.AC00.16.R, build : 2016-09-09
And I still have the smtp time bug.

[jantman]

Where did you get your fw? My version is IP2M-841B-EGD-DE 2.420.AC00.16.R, build : 2016-09-09
And I still have the smtp time bug.

I just bought my 841B via Amazon last week; this is the firmware that shipped on it. However, my version is available for download from https://amcrest.com/firmwaredownloads

[Tungsten E2]

thx, updated IP2M-841B with fw for IP2M-841 to fw version 2.520.AC00.18.R, Build Date: 2017-06-29

fixed the wrong time in smtp as well. but the cam web server seems to hang frequently.

within the past 48hrs I had to reboot the cam twice. IP got timeout, while ping was successful and LED was green. connected via LAN.

do you have the same problem?