Security Camera Flaw could lurk in Thousands of Devices

Senrio disclosed a serious vulnerability called "Devil's Ivy" in the gSOAP open-source library used by Axis Communications cameras and many other devices; the flaw permits remote takeover of cameras without valid credentials. Axis patched dozens of models, but because gSOAP is widely reused (including among ONVIF members), Senrio warns that potentially millions of devices could be affected and recommends isolating devices from the public Internet and applying patches.