Hikvision EZVIZ Security Mini 360

[charmander]

Hello,

I've had this camera for the last couple of years monitoring my toddler at home and I just ran into an article today that there were vulnerabilities with Hikvision (parent company of the EZVIZ).
This is the model I have:

https://www.amazon.ca/EZVIZ-Mini-1080p-Security-Camera/dp/B01N13H4Z0

I learned that there was a CVE: CVE-2021-36260 that occurred last year and I was shocked as I never knew about the security breach, I looked at the models that were affected, Security Notification - Command Injection Vulnerability in Some Hikvision products, but my camera wasn't listed on there, but nonetheless I'm scared since the parent's company was breached and potentially mine as well.

I've read that pretty much in order to prevent any kind of breach is to disconnect the device from my network/internet so that hackers can access it since it's local, but I'm not exactly sure how to do that.
My understanding is that I have to connect the camera to my Wi-Fi, in order for my phone and computer to access it? If that's the case, how do I make it completely LAN without connecting to my Wi-Fi, but at the same time I can access it through my phone/computer while I'm at work?

And on the computer I'm using the software EZVIZ and it says my device is currently on LAN.. So does that mean it doesn't connect to the internet?



Essentially, I want to keep my camera since I think it does it job, but I want to have maximum security where I don't get hacked. I would also like to be able to access the camera via the EZVIZ program on both my phone and computer. Is this possible?

Thanks!

 

[wittaj]

EVERY camera manufacturer has been hacked. People prefer simplicity over security. Kind of ironic for security cameras LOL.

You need to isolate the camera from the internet so that it cannot talk to the internet. Now if this is a cloud based camera, then you are stuck with it as it needs internet access to work.

Otherwise, most of us use OpenVPN or some other free VPN that puts you back onto your home network. Not a paid VPN to hide your IP - that is for porn and illegal streaming.

VPN Primer for Noobs

The internet is a force of nature; no video surveillance system made was designed to be exposed to those forces.. NEVER FORWARD PORTS to your NVR or Cameras, doing such things not only exposes you to severe security problems, but everyone else on the internet too.. Hackers dont want your video...

ipcamtalk.com

How to Secure Your Network (Don't Get Hacked!)

Many camera networks are unsecure, even those installed by professionals. This guide gives basic instruction in how to secure a camera network from the most common types of attacks. Perhaps the most important rule of securing a computer network is to not forward ports to unsecure services...

ipcamtalk.com