Security Cameras From TRENDnet Hacked

By: Mike Tuttle - February 10, 2012

If you have a TRENDnet security camera in your home, listen up. A coding flaw found in some of the cameras allows someone to bypass your password and look into your home.

Hackers have found a small piece of code attached to the IP address of the camera will bypass the need for a password. Once the discovery was made, addresses of hundreds of cameras were posted online for voyeurs to peek in on.

TRENDnet responded to the discovery right away with this press release:

A recent product hack revealed a vulnerability present in several TRENDnet SecurView IP cameras.

TRENDnet’s security team understands that video from some TRENDnet IP SecurView cameras may be accessed online in real time. Upon awareness of the issue, TRENDnet initiated immediate actions to quantify the scope of the issue, initiate corrective actions, and publish updated firmware which resolves the issue.

Only select cameras purchased between April of 2010 and the present may be affected and require a firmware update. Eighteen camera models have been identified. A list of the identified products is available on TRENDnet’s homepage:

A firmware upgrade was made available and instructions for installing it.

Mike Tuttle

About the Author

Mike TuttleWriter. Google+ Writer for WebProNews.

View all posts by Mike Tuttle
  • Ward Herickssen

    Apologies are not enough for a breach that lasted around a month. Did they hired a competent Chief Information Security Officer (CISO) to prevent this kind of things in the future ? Or simply they will continue to lack one (as many other Company who present themseves as ‘secure’) ? TrendNet motto: Networks that People Trust should be changed in Nwtworks that People Trust..ed. As many companies, saving on security and then realizing too late what is the price to pay. We’ll see how many people, who had their privacy violated for weeks, in their own houses, will take decision to sue TrendNet. And if it will then survive. Just a grain of sand in the sea of unsafe, unsecure, self-claiming secure, security budget-cutters companies out there..

  • Robert Noakes

    Read this advisory
    I found this problem back in the early part of 2010.