Security vulnerabilities in video conferencing devices could be remotely exploited by hackers
Security researchers with Trustwave have spotted serious security flaws in four connected video conferencing products by Lifesize. The vulnerabilities could enable threat actors to remotely take control of the devices and access audio and video recordings.
The affected products are Lifesize Team, Lifesize Room, Lifesize Passport and Lifesize Networker. Lifesize is preparing a fix for the vulnerabilities, which may already be under attack by threat actors. In the meantime, users are advised to change the default passwords of affected devices if they haven’t done so already, as this will make the flaws more difficult to exploit.