Fallo de Seguridad: Miles de Cámaras Trendnet en vivo por Internet

Hace unos meses se descubrió un fallo en el software (bug) de las cámaras de seguridad TrendNet que transmiten en vivo a través de una dirección IP a través de la Internet, a partir de la cual cualquier internauta podía y aún puede, acceder a la misma y ver las imágenes que en principio deberían ser privadas, y que por el contrario, tienen como objetivo brindar mayor seguridad a sus dueños.

Si bien los fabricantes de las cámaras han sido avisados del fallo, no pueden solucionar el bug por sí mismos, dado que para hacerlo, deberán ser los propios usuarios del servicio a través de una actualización del programa, el cual sí ha sido ofrecido de forma inmediata por TrendNet. Sin embargo, muchos de éstos no han sabido de la noticia, y todavía continúan utilizando un soft que pone en peligro su privacidad y seguridad.

La mayoría de las cámaras han sido ubicadas en oficinas de trabajadores y habitaciones de casas de familia. Aunque también hay de lugares públicos como Centros de Ski, aeropuertos y algunas bastantes raras como interiores de containers donde se almacena mercadería.

En cuanto a la ubicación geográfica de las cámaras de seguridad, la mayoría de ellas se encuentran en Estados Unidos, el resto en Europa y también algunas en suramérica, habiendo incluso un par en la Argentina. A continuación pueden ver un mapa con la ubicación exacta de las cámaras, aunque sin la dirección IP de las mismas por cuestiones de seguridad.

En el siguiente listado se puede acceder a muchas de las cámaras que continúan transmitiendo la señal a través de las direcciones IP sin contraseña:

https://98.196.232.179:80/anony/mjpg.cgi https://200.75.59.122/anony/mjpg.cgi https://83.69.193.130/anony/mjpg.cgi https://222.166.217.51/anony/mjpg.cgi https://67.181.188.187:80/anony/mjpg.cgi https://87.231.60.174/anony/mjpg.cgi https://209.119.5.6:80/anony/mjpg.cgi https://85.186.35.67:80/anony/mjpg.cgi https://216.217.47.105:80/anony/mjpg.cgi https://5.35.8.114:80/anony/mjpg.cgi https://88.174.21.101:80/anony/mjpg.cgi https://107.1.38.196:80/anony/mjpg.cgi https://108.12.16.115:80/anony/mjpg.cgi https://108.162.48.14:80/anony/mjpg.cgi https://108.34.200.143:80/anony/mjpg.cgi https://108.56.228.144:80/anony/mjpg.cgi https://108.70.237.208:80/anony/mjpg.cgi https://108.73.56.148:80/anony/mjpg.cgi https://109.197.73.212:80/anony/mjpg.cgi https://109.6.159.112:80/anony/mjpg.cgi https://115.66.76.76:80/anony/mjpg.cgi https://128.164.241.34:80/anony/mjpg.cgi https://129.170.38.84:80/anony/mjpg.cgi https://130.74.107.106:80/anony/mjpg.cgi https://130.74.107.62:80/anony/mjpg.cgi https://130.74.107.63:80/anony/mjpg.cgi https://132.247.154.80:80/anony/mjpg.cgi https://168.96.62.141:8080/anony/mjpg.cgi https://169.226.168.91:80/anony/mjpg.cgi https://169.229.137.62:80/anony/mjpg.cgi https://169.229.137.64:80/anony/mjpg.cgi https://173.11.220.195:80/anony/mjpg.cgi https://173.11.232.57:80/anony/mjpg.cgi https://173.11.239.250:80/anony/mjpg.cgi https://173.14.66.201:80/anony/mjpg.cgi https://173.14.71.58:80/anony/mjpg.cgi https://173.167.157.228:80/anony/mjpg.cgi https://173.18.167.173:80/anony/mjpg.cgi https://173.196.179.29:80/anony/mjpg.cgi https://173.61.135.215:80/anony/mjpg.cgi https://173.66.106.168:8080/anony/mjpg.cgi https://173.66.53.18:80/anony/mjpg.cgi https://174.5.39.32:80/anony/mjpg.cgi https://174.55.17.190:80/anony/mjpg.cgi https://174.55.25.138:80/anony/mjpg.cgi https://174.84.251.155:80/anony/mjpg.cgi https://176.62.186.25:80/anony/mjpg.cgi https://178.209.122.58:80/anony/mjpg.cgi https://178.61.18.43:80/anony/mjpg.cgi https://178.83.175.178:80/anony/mjpg.cgi https://184.56.40.82:8080/anony/mjpg.cgi https://186.114.191.96:80/anony/mjpg.cgi https://186.22.57.184:80/anony/mjpg.cgi https://186.46.192.170:5000/anony/mjpg.cgi https://186.66.128.42:80/anony/mjpg.cgi https://186.90.23.177:80/anony/mjpg.cgi https://187.162.230.160:80/anony/mjpg.cgi https://187.210.79.226:80/anony/mjpg.cgi https://188.193.90.192:80/anony/mjpg.cgi https://188.35.17.82:80/anony/mjpg.cgi https://188.62.209.239:80/anony/mjpg.cgi https://189.2.79.44:80/anony/mjpg.cgi https://190.109.223.218:80/anony/mjpg.cgi https://190.111.113.236:8080/anony/mjpg.cgi https://190.131.157.238:8080/anony/mjpg.cgi https://190.146.191.28:80/anony/mjpg.cgi https://190.147.210.43:80/anony/mjpg.cgi https://190.150.15.83:8080/anony/mjpg.cgi https://190.186.158.61:8080/anony/mjpg.cgi https://190.213.184.246:80/anony/mjpg.cgi https://190.222.81.108:80/anony/mjpg.cgi https://190.223.164.185:80/anony/mjpg.cgi https://190.26.108.187:80/anony/mjpg.cgi https://190.52.196.6:80/anony/mjpg.cgi https://190.6.107.137:80/anony/mjpg.cgi https://193.68.68.131:80/anony/mjpg.cgi https://193.77.222.115:80/anony/mjpg.cgi https://195.151.236.34:80/anony/mjpg.cgi https://200.110.25.230:80/anony/mjpg.cgi https://200.161.104.177:5000/anony/mjpg.cgi https://200.21.94.187:80/anony/mjpg.cgi https://200.32.183.123:80/anony/mjpg.cgi https://200.34.194.101:80/anony/mjpg.cgi https://200.75.58.247:80/anony/mjpg.cgi https://201.221.159.48:80/anony/mjpg.cgi https://201.240.215.246:80/anony/mjpg.cgi https://201.6.152.50:8080/anony/mjpg.cgi https://202.147.196.20:80/anony/mjpg.cgi https://202.78.202.249:8080/anony/mjpg.cgi https://204.50.231.165:80/anony/mjpg.cgi https://205.121.195.23:8080/anony/mjpg.cgi https://207.253.37.150:80/anony/mjpg.cgi https://207.68.47.143:8080/anony/mjpg.cgi https://209.119.5.6:80/anony/mjpg.cgi https://209.152.105.243:80/anony/mjpg.cgi https://213.221.215.14:80/anony/mjpg.cgi https://213.252.77.249:80/anony/mjpg.cgi https://213.33.207.210:80/anony/mjpg.cgi https://217.128.225.246:80/anony/mjpg.cgi https://217.86.211.194:80/anony/mjpg.cgi https://220.245.206.12:80/anony/mjpg.cgi https://24.108.61.214:80/anony/mjpg.cgi https://24.155.150.53:80/anony/mjpg.cgi https://24.17.250.178:80/anony/mjpg.cgi https://24.193.62.132:80/anony/mjpg.cgi https://24.20.31.37:80/anony/mjpg.cgi https://24.212.222.211:80/anony/mjpg.cgi https://24.218.111.238:80/anony/mjpg.cgi https://24.226.116.194:80/anony/mjpg.cgi https://24.234.79.207:80/anony/mjpg.cgi https://24.50.90.225:80/anony/mjpg.cgi https://24.62.68.44:80/anony/mjpg.cgi https://24.64.165.125:80/anony/mjpg.cgi https://24.86.232.212:80/anony/mjpg.cgi https://24.88.119.241:80/anony/mjpg.cgi https://24.92.172.228:80/anony/mjpg.cgi https://46.14.144.64:80/anony/mjpg.cgi https://46.14.144.66:80/anony/mjpg.cgi https://46.227.211.202:80/anony/mjpg.cgi https://46.45.15.53:80/anony/mjpg.cgi https://46.52.215.130:80/anony/mjpg.cgi https://50.135.92.251:80/anony/mjpg.cgi https://50.136.129.154:80/anony/mjpg.cgi https://50.195.44.202:80/anony/mjpg.cgi https://50.39.85.158:80/anony/mjpg.cgi https://50.46.224.202:80/anony/mjpg.cgi https://50.73.116.101:80/anony/mjpg.cgi https://50.78.197.25:8080/anony/mjpg.cgi https://50.78.48.125:80/anony/mjpg.cgi https://50.79.140.70:80/anony/mjpg.cgi https://62.61.140.11:80/anony/mjpg.cgi https://63.116.95.23:80/anony/mjpg.cgi https://63.116.95.24:80/anony/mjpg.cgi https://63.116.95.25:80/anony/mjpg.cgi https://64.123.102.37:7777/anony/mjpg.cgi https://64.149.194.60:80/anony/mjpg.cgi https://64.149.194.61:80/anony/mjpg.cgi https://65.38.91.214:8080/anony/mjpg.cgi https://66.128.84.186:80/anony/mjpg.cgi https://66.219.125.159:80/anony/mjpg.cgi https://66.226.247.106:80/anony/mjpg.cgi https://66.229.85.239:80/anony/mjpg.cgi https://66.43.122.14:80/anony/mjpg.cgi https://66.51.87.211:80/anony/mjpg.cgi https://66.76.169.14:8080/anony/mjpg.cgi https://66.79.202.235:80/anony/mjpg.cgi https://67.102.154.123:80/anony/mjpg.cgi https://67.168.142.6:80/anony/mjpg.cgi https://67.226.141.75:8080/anony/mjpg.cgi https://68.117.114.173:8080/anony/mjpg.cgi https://68.144.31.21:80/anony/mjpg.cgi https://68.189.172.19:80/anony/mjpg.cgi https://68.237.174.81:8080/anony/mjpg.cgi https://68.3.200.108:8080/anony/mjpg.cgi https://68.41.193.180:80/anony/mjpg.cgi https://68.45.45.40:80/anony/mjpg.cgi https://68.55.59.54:80/anony/mjpg.cgi https://69.136.31.248:80/anony/mjpg.cgi https://69.233.74.56:80/anony/mjpg.cgi https://69.247.33.144:80/anony/mjpg.cgi https://69.34.177.49:80/anony/mjpg.cgi https://70.61.45.247:80/anony/mjpg.cgi https://71.131.180.109:80/anony/mjpg.cgi https://71.178.167.85:80/anony/mjpg.cgi https://71.184.199.167:8080/anony/mjpg.cgi https://71.202.97.117:80/anony/mjpg.cgi https://71.204.146.5:80/anony/mjpg.cgi https://71.237.218.60:80/anony/mjpg.cgi https://71.33.228.73:80/anony/mjpg.cgi https://71.42.236.93:80/anony/mjpg.cgi https://71.58.77.159:80/anony/mjpg.cgi https://71.63.246.111:80/anony/mjpg.cgi https://71.95.55.169:80/anony/mjpg.cgi https://72.0.248.220:5000/anony/mjpg.cgi https://72.80.54.199:80/anony/mjpg.cgi https://74.103.39.10:8080/anony/mjpg.cgi https://74.111.117.48:80/anony/mjpg.cgi https://74.166.15.35:80/anony/mjpg.cgi https://74.255.79.30:80/anony/mjpg.cgi https://74.95.149.89:80/anony/mjpg.cgi https://74.95.252.241:80/anony/mjpg.cgi https://75.151.35.245:80/anony/mjpg.cgi https://75.42.107.73:80/anony/mjpg.cgi https://75.69.122.28:80/anony/mjpg.cgi https://75.70.156.49:80/anony/mjpg.cgi https://75.73.165.142:80/anony/mjpg.cgi https://75.74.175.60:80/anony/mjpg.cgi https://75.94.87.217:80/anony/mjpg.cgi https://75.99.24.203:80/anony/mjpg.cgi https://76.102.133.219:8080/anony/mjpg.cgi https://76.108.158.253:8080/anony/mjpg.cgi https://76.108.45.110:80/anony/mjpg.cgi https://76.116.210.124:80/anony/mjpg.cgi https://76.123.120.211:80/anony/mjpg.cgi https://76.161.249.72:8080/anony/mjpg.cgi https://76.167.109.151:80/anony/mjpg.cgi https://76.17.244.218:80/anony/mjpg.cgi https://76.184.71.71:8080/anony/mjpg.cgi https://76.187.248.98:80/anony/mjpg.cgi https://76.21.144.96:80/anony/mjpg.cgi https://76.23.86.211:80/anony/mjpg.cgi https://76.29.215.182:80/anony/mjpg.cgi https://76.90.41.125:8080/anony/mjpg.cgi https://76.92.92.199:80/anony/mjpg.cgi https://76.93.141.79:8080/anony/mjpg.cgi https://77.232.154.239:80/anony/mjpg.cgi https://77.51.228.3:8080/anony/mjpg.cgi https://78.248.161.106:80/anony/mjpg.cgi https://79.5.56.152:80/anony/mjpg.cgi https://80.13.214.101:8080/anony/mjpg.cgi https://80.251.205.98:80/anony/mjpg.cgi https://81.235.245.199:80/anony/mjpg.cgi https://81.56.77.52:80/anony/mjpg.cgi https://82.147.83.8:80/anony/mjpg.cgi https://82.226.232.3:8080/anony/mjpg.cgi https://82.228.49.139:7777/anony/mjpg.cgi https://82.229.90.252:80/anony/mjpg.cgi https://82.243.130.179:8080/anony/mjpg.cgi https://82.243.48.161:80/anony/mjpg.cgi https://82.244.132.85:80/anony/mjpg.cgi https://8.25.227.164:8080/anony/mjpg.cgi https://83.65.35.243:80/anony/mjpg.cgi https://83.65.35.245:80/anony/mjpg.cgi https://85.12.202.7:8080/anony/mjpg.cgi https://85.142.197.28:80/anony/mjpg.cgi https://85.16.117.168:80/anony/mjpg.cgi https://85.21.241.162:80/anony/mjpg.cgi https://85.234.56.87:7777/anony/mjpg.cgi https://85.4.59.142:8080/anony/mjpg.cgi https://87.104.162.124:8080/anony/mjpg.cgi https://87.251.128.242:80/anony/mjpg.cgi https://88.168.198.124:8080/anony/mjpg.cgi https://88.174.96.57:80/anony/mjpg.cgi https://88.175.48.229:80/anony/mjpg.cgi https://89.109.21.29:80/anony/mjpg.cgi https://89.109.42.75:8080/anony/mjpg.cgi https://89.137.72.239:80/anony/mjpg.cgi https://89.163.5.216:80/anony/mjpg.cgi https://89.250.19.130:5560/anony/mjpg.cgi https://89.36.169.251:80/anony/mjpg.cgi https://89.89.242.17:80/anony/mjpg.cgi https://90.155.203.193:80/anony/mjpg.cgi https://90.80.226.125:80/anony/mjpg.cgi https://91.214.205.118:80/anony/mjpg.cgi https://92.241.110.142:8080/anony/mjpg.cgi https://92.243.178.26:8080/anony/mjpg.cgi https://93.123.163.101:80/anony/mjpg.cgi https://93.185.192.157:80/anony/mjpg.cgi https://93.188.159.92:80/anony/mjpg.cgi https://93.83.167.106:8080/anony/mjpg.cgi https://95.128.240.187:80/anony/mjpg.cgi https://96.243.216.24:8080/anony/mjpg.cgi https://96.38.236.178:80/anony/mjpg.cgi https://96.40.97.218:80/anony/mjpg.cgi https://96.48.4.43:80/anony/mjpg.cgi https://96.49.45.188:8080/anony/mjpg.cgi https://96.54.14.134:80/anony/mjpg.cgi https://96.54.164.106:80/anony/mjpg.cgi https://97.81.133.61:80/anony/mjpg.cgi https://98.196.232.179:80/anony/mjpg.cgi https://98.208.164.81:80/anony/mjpg.cgi https://98.210.138.99:80/anony/mjpg.cgi https://98.220.194.61:80/anony/mjpg.cgi https://98.236.222.168:80/anony/mjpg.cgi https://98.246.187.107:80/anony/mjpg.cgi https://98.248.110.195:80/anony/mjpg.cgi https://98.248.27.90:80/anony/mjpg.cgi https://99.101.237.25:80/anony/mjpg.cgi https://99.111.29.48:80/anony/mjpg.cgi https://99.1.173.119:80/anony/mjpg.cgi https://99.166.17.51:80/anony/mjpg.cgi https://99.226.196.104:80/anony/mjpg.cgi https://99.234.193.225:80/anony/mjpg.cgi https://99.238.69.28:80/anony/mjpg.cgi https://99.26.123.110:80/anony/mjpg.cgi https://99.4.150.14:8080/anony/mjpg.cgi https://99.67.50.100:8080/anony/mjpg.cgi https://99.89.138.35:80/anony/mjpg.cgi https://99.91.56.246:5000/anony/mjpg.cgi https://116.86.225.73:8080/anony/mjpg.cgi https://66.51.87.211:80/anony/mjpg.cgi https://205.121.195.23:8080/anony/mjpg.cgi https://114.142.223.175:80/anony/mjpg.cgi https://69.198.183.90:80/anony/mjpg.cgi https://70.15.185.41:8080/anony/mjpg.cgi https://71.194.30.107:80/anony/mjpg.cgi https://201.219.193.123:80/anony/mjpg.cgi https://24.155.150.53:80/anony/mjpg.cgi https://2.234.99.53:80/anony/mjpg.cgi https://37.153.4.46:80/anony/mjpg.cgi https://93.83.167.106:8080/anony/mjpg.cgi https://74.95.103.238:80/anony/mjpg.cgi https://216.199.193.90:80/anony/mjpg.cgi https://94.102.31.181:80/anony/mjpg.cgi https://212.198.140.246:80/anony/mjpg.cgi https://67.164.205.129:80/anony/mjpg.cgi https://68.144.31.21:80/anony/mjpg.cgi https://213.183.122.15:80/anony/mjpg.cgi https://90.185.30.33:8080/anony/mjpg.cgi https://204.12.171.140:80/anony/mjpg.cgi https://96.38.236.178:80/anony/mjpg.cgi https://200.21.94.184:80/anony/mjpg.cgi https://99.43.118.255:80/anony/mjpg.cgi https://193.40.1.143:80/anony/mjpg.cgi https://85.26.220.53:80/anony/mjpg.cgi https://190.146.191.28:80/anony/mjpg.cgi https://109.188.70.132:80/anony/mjpg.cgi https://83.65.35.244:80/anony/mjpg.cgi https://68.82.251.66:80/anony/mjpg.cgi https://75.151.88.66:80/anony/mjpg.cgi https://85.170.28.41:80/anony/mjpg.cgi https://200.126.198.195:80/anony/mjpg.cgi https://68.189.225.34:80/anony/mjpg.cgi https://64.91.5.49:8080/anony/mjpg.cgi https://65.96.88.250:80/anony/mjpg.cgi https://174.55.25.138:80/anony/mjpg.cgi https://88.167.80.83:80/anony/mjpg.cgi https://92.50.137.114:80/anony/mjpg.cgi https://178.198.201.198:80/anony/mjpg.cgi https://173.56.26.34:80/anony/mjpg.cgi https://222.166.217.51:80/anony/mjpg.cgi https://130.74.107.54:80/anony/mjpg.cgi https://178.208.252.172:80/anony/mjpg.cgi https://76.16.136.144:80/anony/mjpg.cgi https://108.39.44.105:80/anony/mjpg.cgi https://76.108.158.253:8080/anony/mjpg.cgi https://95.189.107.172:80/anony/mjpg.cgi https://74.103.39.10:8080/anony/mjpg.cgi https://78.138.156.43:80/anony/mjpg.cgi https://74.142.224.245:80/anony/mjpg.cgi https://70.79.27.80:80/anony/mjpg.cgi https://71.224.3.29:8080/anony/mjpg.cgi https://74.254.123.77:80/anony/mjpg.cgi https://71.59.84.44:80/anony/mjpg.cgi https://194.165.128.166:80/anony/mjpg.cgi https://216.199.193.88:80/anony/mjpg.cgi https://121.184.59.24:80/anony/mjpg.cgi https://90.155.203.193:80/anony/mjpg.cgi https://195.18.48.167:80/anony/mjpg.cgi https://81.134.25.182:80/anony/mjpg.cgi https://198.111.223.56:80/anony/mjpg.cgi https://64.149.194.61:80/anony/mjpg.cgi https://201.156.225.111:80/anony/mjpg.cgi https://188.134.79.111:8080/anony/mjpg.cgi https://76.17.244.218:80/anony/mjpg.cgi https://80.56.12.126:8080/anony/mjpg.cgi https://71.189.230.108:80/anony/mjpg.cgi https://93.185.192.157:8080/anony/mjpg.cgi https://212.195.28.220:80/anony/mjpg.cgi https://82.227.66.157:80/anony/mjpg.cgi https://75.172.184.110:80/anony/mjpg.cgi https://88.174.46.156:80/anony/mjpg.cgi https://198.91.185.102:80/anony/mjpg.cgi https://186.15.82.91:80/anony/mjpg.cgi https://202.44.15.199:80/anony/mjpg.cgi https://89.152.14.39:80/anony/mjpg.cgi https://213.245.83.114:8080/anony/mjpg.cgi https://62.61.140.11:80/anony/mjpg.cgi https://24.189.100.146:80/anony/mjpg.cgi https://145.255.248.214:80/anony/mjpg.cgi https://24.234.79.207:80/anony/mjpg.cgi https://76.29.160.129:80/anony/mjpg.cgi https://24.63.159.16:80/anony/mjpg.cgi https://98.246.228.128:80/anony/mjpg.cgi https://77.50.158.227:80/anony/mjpg.cgi https://76.23.86.211:80/anony/mjpg.cgi https://188.43.51.31:8080/anony/mjpg.cgi https://216.108.14.85:80/anony/mjpg.cgi https://99.189.25.158:80/anony/mjpg.cgi https://78.224.148.125:8080/anony/mjpg.cgi https://190.68.116.106:80/anony/mjpg.cgi https://213.196.158.168:80/anony/mjpg.cgi https://71.159.226.158:80/anony/mjpg.cgi https://110.232.81.214:80/anony/mjpg.cgi https://24.15.18.130:8080/anony/mjpg.cgi https://109.172.41.17:80/anony/mjpg.cgi https://23.25.191.242:80/anony/mjpg.cgi https://107.1.192.179:80/anony/mjpg.cgi https://97.81.133.61:80/anony/mjpg.cgi https://86.71.126.51:80/anony/mjpg.cgi https://89.85.64.76:80/anony/mjpg.cgi https://200.75.59.122:80/anony/mjpg.cgi https://212.139.206.88:80/anony/mjpg.cgi https://83.69.193.130:80/anony/mjpg.cgi https://93.180.12.30:80/anony/mjpg.cgi https://68.150.197.176:7777/anony/mjpg.cgi https://78.248.161.106:80/anony/mjpg.cgi https://109.193.159.91:80/anony/mjpg.cgi https://85.142.197.28:80/anony/mjpg.cgi https://193.77.222.115:80/anony/mjpg.cgi https://88.184.182.187:8080/anony/mjpg.cgi https://108.222.150.125:80/anony/mjpg.cgi https://65.167.91.220:80/anony/mjpg.cgi https://169.237.230.50:80/anony/mjpg.cgi https://78.36.163.128:80/anony/mjpg.cgi

Esta vulnerabilidad pone en evidencia cuán importante es mantener actualizado el soft de nuestros productos, principalmente en aquellos que poseen versiones iniciales, las que en su mayoría son propensas a incluír bugs (fallos) como el que vemos en las cámaras TRENDNet.