Hikvision patches hik-connect vulnerability.

[tix3]

Hikvision announced that its platform had a vulnerability in the way it handled cookies here:
Security Notice - Statement on Insecure Cookie Handling Vulnerability in hik-connect.com - Hangzhou Hikvision Digital Technology Co. Ltd.
The write up of the bug here :

explains how it could be exploited to access and manipulate anyones device and hik-connect account

 

[alastairstevenson]

An interesting write-up and actually a pretty good response by Hikvision.
But another indication that Hikvision do need to get a lot better at secure coding.

 

[Securame]

Good to see it patched so quickly!