Slovakia discovers Russian backdoors in 279 new traffic cameras — SMS-triggered shell access and passwordless live feeds found in EU-funded rollout
Slovakia sought to modernize its traffic control systems by acquiring a batch of 279 new speed cameras, but they have Russian backdoors and multiple other security issues.
Slovakia's national security service, the NBU, has uncovered multiple security flaws in 279 newly installed NERO R-ONE traffic cameras, which were acquired using a €30 million EU fund. These cameras, believed to be rebranded Russian CORDON PRO.M traffic cameras made by Semicon, have significant vulnerabilities. Firstly, they possess hardcoded Russian phone numbers that can open a backdoor, allowing SMS-triggered shell and network access.
Secondly, live camera feeds can be accessed by anyone with the device's IP address without the need for a password. The Slovak Ministry of the Interior has deactivated these cameras following the NBU's investigation, which was prompted by opposition party pressure. The current government, led by populist Robert Fico, initially denied the cameras were of Russian origin and dismissed security concerns.
Fico, known for his pro-Russia stance, has been a subject of interest for further reading. The cameras were reportedly procured through a Cyprus-based shell company with fraudulent certifications. Independent auditors will now verify the NBU's findings, with fears that similar issues may exist in other Eastern European countries, including Croatia.
Written by urgent.news from Tom's Hardware's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
