Slovakia Deactivates Russian-Origin Traffic Cameras Due to SMS-Triggered Backdoors and Passwordless Access
Slovakia's national security service, the NBU, has discovered significant security vulnerabilities in 279 new NERO R-ONE speed cameras, leading to their deactivation. These cameras, acquired as part of a €30 million EU-funded modernization project, are suspected to be rebranded Russian CORDON PRO.M traffic cameras manufactured by St. Petersburg-based Semicon. The NBU found that the cameras contain a hardcoded list of Russian phone numbers capable of activating a backdoor via SMS, granting shell and network access. Additionally, the cameras' web management portal allows anyone with the device IP to access live streams without a password, and the SecureBoot feature is ineffective. The acquisition process was reportedly circuitous, involving a Cyprus-based shell company and fake certifications. The current Slovak government, led by Robert Fico, initially dismissed concerns about the cameras' Russian origin and security flaws, but pressure from the opposition prompted the NBU investigation. An independent audi...