GreyNoise Intelligence Discovers Zero-Day Vulnerabilities in Live Streaming Cameras with the Help of AI
Summary
"This isnt about the specific software or how many people use it — its about how AI helped us catch a zero-day exploit we might have missed otherwise," said Andrew Morris, Founder and Chief Architect at GreyNoise Intelligence. The vulnerabilities, tracked as CVE-2024-8956 and CVE-2024-8957, impact NDI-enabled pan-tilt-zoom (PTZ) cameras from several manufacturers, including PTZOptics, Multicam Systems SAS, and SMTAV Corporation. These cameras, reportedly used in sensitive environments like business conferences, telehealth sessions, and government settings, potentially represent an attractive target for malicious actors looking to compromise video feeds or use the devices as a point of entry into broader network infrastructure. GreyNoise partnered with VulnCheck to responsibly disclose these vulnerabilities, working closely with affected manufacturers to ensure swift remediation. GreyNoise empowers the security teams of enterprises and global governments to act with speed and confidence by providing real-time, verifiable perimeter-based threat intelligence.