Cacagoo Camera App

[Alice Palecek]

DiscoverAgent DVR: Your Free AI-Powered Video Surveillance Solution. Easy to install, this advanced software provides real-time detection and tracking of people, vehicles, and objects. Enjoy a user-friendly interface on any device, manage unlimited cameras, and access your feed remotely without port forwarding. Enhance your safety and security with Agent DVR's powerful features. Download now for 24/7 peace of mind!

excuse me?, i have a problem about sd card on yi home, i have 2 yi home camera with sd card install in it, the first camera working fine, but the other one, the sd card not showing on yi home menu, i try to move sd card on the working one to the other camera that not show the sd card, same result, the sd card is good, trying to read on computer, just fine, need help please

@jgasson2020, @Nataliazea, @Ijustmadethistoask

UPDATE

Yesterday I said we could provide firmware for your cameras, however I was given incorrect information. We cannot provide firmware for third party cameras. You would have to contact the camera manufacturer directly.

We can offer support for issues concerning the YI IoT app. So we will do some investigation, and if it turns out to be an app issue we will do our best to get it sorted.

Please send an email to sup...@yitechnology.com describing your issue. Please also include the following information.

1 - Camera make and model

2 - Phone make and model

3 - Your iOS or Android version

4 - The YI IoT app version (version number)

Any help on this? Same thing happened with my camera. Sound detection was working fine on 19/07 then stopped working 20th. I have two identical cameras and same behaviour with both. So not hardware problem. Cacagoo camera.

We conduct this research and inform vendors about findings so that they can be patched on time, protecting users and products from compromise. This article describes the technical issues behind the vulnerability.

We tried to access the telnet session by a brute-force attack through a Metasploit module against the custom user-password list and we successfully managed to login to the telnet session with root privileges. Here are the screenshots below:

We observed that ftpget is available in the camera and an attacker can use it to download and install any malware, or place a backdoor after having telnet access. To replicate the real-world attack scenario, we placed a backdoor in the camera which can further penetrate the network to scan for other accessible or vulnerable systems and exploit them. Attackers can send commands to these systems and use these cameras as CnC.

We observed that the RTSP service is running at port 554 and 8001. We ran our locally setup tool arsenal to fetch RTSP credentials and route. After running the tools, we noticed a blank username password field. Browsing the RTSP in VLC was the next test to see if we had live video streaming. We opened the VLC and browsed rtsp://192.168.1.189:8001/

We encountered an RTSP authentication POP-UP message, entering admin as the username while keeping the Password field empty. To our surprise, there was LIVE video streaming We recorded the packet streams to get the packets that were being transferred. The screen shots below show the output and authentication before sending the RTSP packets.

Video and audio traffic is also unencrypted as seen below. Besides weak RTSP authentication, traffic should be encrypted or use SRTSP so that if an intruder captured the audio/video traffic, they would not be able to see the stream.

Domain is resolved to 112.65.70.245. It is noted that the app is trying to connect to a random Chinese domain (ebjvu[.]cn) on that IP. The info is being leaked through the app, which is suspicious and can be considered as a security flaw.

As the research shows, there are some serious security issues with these devices and its web interface. It is mandatory to fix these issues to improve the security before they get into the wrong hands. Here are some recommendations from our side:

Last but not least, the lack of sufficient cybersecurity implementations in IoT devices is the next thing to tackle, not only for the IP surveillance industry but for all IoT-based businesses. Learn more about creating a secure IoT environment for customers.

This item Cacagoo Video Baby Monitor, Security Wi-Fi Camera 1080P Wireless IP Camera Indoor Home Dome Camera with IR Night Vision/Two-Way Audio, Cloud Storage. Through our indoor camera Wi-Fi wireless audio baby monitor, you can see what is your little one doing now. Talk to your baby with Two-way Audio while you are away from home. 355 horizontal a 155 vertical rotation range for monitoring your home security. Motion detection and recording providing the best playback service and detection alarm, you did not have to worried about your pet and your home.

Over 98% of deliveries arrive at our customers location without any damage and are signed for without incident.

For your protection, we ask that you please inspect the packaging and the contents carefully.

You have 3 business days to call us at 905-271-6770 to report any damage.

If you authorize the delivery company to leave your order without a signature, HomeEssentialsClearance.com cannot be held liable for any damages or missing pieces.

Leaving a note is the same as signing for your products in good condition.

If you are unable to reach us, you should refuse the shipment. Doing this will not invalidate your order and we will still work diligently to get your order to you in good condition as quickly as possible.

Any Dyson product's warranty is done directly with Dyson themselves. Upon purchase you will receive a sealed box (colours may vary) with a grey sticker that has the serial number on it. You must go to dysoncanada.ca to register the serial number and obtain your warranty. Any issues with the product, you must call Dyson as warranty is done at your house, office or wherever you prefer. Home Essentials do not offer instore warranty for any Dyson products as per Dyson's policy

All Items in store with the exception of Dyson, has one month warranty with Home Essentials Clearance Center. Depending on an item, the manufacturer's warranty varies after one month in-store warranty ends.

Damages and issues

Please inspect your order upon reception and contact us immediately if the item is defective, damaged or if you receive the wrong item, so that we can evaluate the issue and make it right.

Located in MISSISSAUGA Ontario, Dixie Outlet Mall, Home Essentials Clearance started in 2004. Dedicated to carry Appliances such as Vacuum Cleaners to Microwaves, we assure you we have the lowest price guarantee

Open the APP, click the screen, click the setting button in the upper right corner, and select Smart Dectection to set up. To use motion detection, you need to make sure that the phone will not block the APP's alarm notification.

Yes. Cloud storage has a free trial period of 1 month, after which you can choose not to renew; if you need to save the recorded video, please buy a FAT32 format SD card, the product supports 8-64GB size SD card.

With advanced algorithms, CACAGOO IP Camera can detect moving objects and automatically tracks and captures their movement. Auto-Cruise Mode can survey the area horizontally, or select locations to cruise through and return to any of them at the tap of a button.

Built-in high precision motion detection technology, this wireless security camera sends instant alerts to your mobile phone around the clock. This ip camera helps you stay in touch with your home anytime, anywhere.

If the item is currently not in stock, you can still order it and an email will be sent to you with the expected delivery date. All items are expected to arrive within 1 to 5 business days - Deliver My Cart Fulfillment.

Included with the camera are an auxiliary (cigarette lighter)-to-USB Type A charging cable, as well as a Type A-to-micro-USB data cable for charging via an adapter or transferring data to a computer.

In case you needed a reason not to buy an internet-connected camera to guard your fortress: Yet another smart camera contained severe vulnerabilities that made it possible for hackers to hijack your device and spy on you in the privacy of your home.

Security cameras are an important tool for protecting homes and businesses. While they provide valuable assurance for physical assets, they also often expose interfaces that allow users to manage the device over the network, presenting a number of potential cybersecurity risks.

Manufacturers are constantly competing to release their product as soon as possible to build a larger market share with their solution. Physical products can take a significant amount of time to reach shelves from initial design, and companies often start production without necessarily considering the security implications.

The primary issue with this is that firmware is usually several weeks, or even months, out of date by the time the product reaches consumer shelves. According to NIST, 2021 saw an average of 50 CVEs disclosed each day, meaning that the likelihood of a security camera being vulnerable to a new CVE before it is even unboxed and installed increases every day the camera sits on a shelf.

In March 2021, researchers found that the firmware for TP-LINK TAPO C200 cameras up to and including version 1.1.15 allowed for attackers to take advantage of the uhttpd binary running as root. Exploiting this vulnerability gave attackers full remote control of the camera. This means that the camera was vulnerable right from its initial release, and threat actors could have taken advantage of this months before the vulnerability was publicly disclosed.

3a8082e126