Kiwi hacker Caleb “alhazred” Anderson has unveiled a video intercom device that could allow him to “spy” on all 700 apartments in his building.
The GrandStream GXV3175 intercom unit was upgraded after Anderson launched a hangover-inspired attack. It is worth noting that Anderson also works as a principal consultant at Context Information Security.
"One day I thought: I bet I can hack this device (GrandStream GXV3175) and get video feeds from all 700 apartments in my building," Anderson told the Kiwicon conference in Wellington on Friday.
“The unit looks completely normal, you can’t tell it’s hacked by looking at it.”
Anderson discovered directory traversal and command injection vulnerabilities, which, along with other bugs, provide access to the intercom system.
Anderson did not gain access to any of the units in his apartment and simply demonstrated that this feat was possible to achieve.
