Slovakia finds Russian backdoor in traffic speed cameras

Slovakia, in an effort to modernize its traffic control systems, recently installed speed cameras. However, a recent investigation uncovered significant security concerns with these cameras. The National Bureau of the Slovakian National Security Service discovered that the cameras have multiple vulnerabilities.

Firstly, these cameras come equipped with SMS-activated Russian backdoors. Furthermore, it was found that anyone can access live camera feeds using the device's IP address, without needing a password.

These cameras are believed to be rebranded Russian CORDON PRO.M traffic cameras, manufactured by Semicon, a firm based in St. Petersburg. They were reportedly acquired through a Cyprus-based shell company that utilized fake certifications.

The investigation was prompted in part by opposition political pressure in Slovakia. Perhaps most concerning from a national security standpoint, these cameras contain a pre-programmed list of Russian phone numbers. Sending an SMS to one of these numbers grants access to a backdoor, allowing for shell and network access.

Additionally, the SecureBoot feature is not functioning correctly, and the web management portal can be accessed by anyone possessing the camera's IP address. This exposes live streams, posing a significant security risk.

Following these findings, the Slovak Ministry of the Interior has deactivated all installed and configured cameras. An independent auditor will be brought in to verify the National Bureau's findings. This incident raises concerns that similar issues may exist with traffic control cameras in Croatia and other Eastern European countries.