In research published October 28, Kaspersky described a flaw that let someone on the local Wi-Fi network interrupt certain Intelbras cameras without logging in. The reported effect was loss of live monitoring and device management, rather than theft of video.
Intelbras owners: check the exact model and firmware
The researchers tested firmware v240927 on an iM3B-C, also identified as iM3 C. They report that the same firmware is compatible with iMX C, iM4 C, iM5 SC, iME 360 C and iM7+ FC models. This finding should not be applied to every Intelbras camera.
Kaspersky says Intelbras issued R.260804 and that its researchers validated the fix. Check the installed firmware against the update supplied for your model. Intelbras also provides an official microSD update guide covering these models. Use only the update and procedure intended for your model.
For any smart camera, review the basics
The UK’s National Cyber Security Centre recommends replacing default camera passwords and keeping firmware updated. Enable automatic updates where available. If you do not need internet-based remote viewing, consider turning it off, while checking whether that also disables motion alerts or smart-home integrations you use.
Review the router as well. NCSC advises considering whether UPnP and port forwarding are needed, because they can make devices reachable from outside the home. Changing those settings can interrupt other applications, so consult the router’s documentation before making changes.
Its broader smart-device guidance also recommends enabling two-step verification when the device or app offers it and checking how long the manufacturer will provide security updates. These are general precautions; they do not replace installing the model-specific firmware fix.
Sources: Kaspersky Securelist research; Intelbras update instructions; NCSC camera guidance; NCSC smart-device guidance.
Image: AI-generated editorial illustration created for DaySec, not a photograph of the incident.
