What we found
During a network install, we came across a camera recorder made by TVT, a Chinese manufacturer whose recorders are sold under many brand names. A published flaw in its firmware, CVE-2024-14007, returns the administrator’s username and password to anyone who asks, without a login. With them, a stranger can watch the cameras and delete the footage.
TVT fixed the flaw in later firmware, but this model was no longer supported and never got the fix.
What attackers do with old recorders
TVT recorders are a known target. In April 2025, GreyNoise saw attempts to exploit CVE-2024-14007 jump to three times their usual level, from more than 6,600 addresses in a month, and linked them to Mirai, malware that gathers hijacked devices into botnets.
In October 2026, GreyNoise reported 143 devices in 34 countries hijacked to resell their owners’ internet connections to strangers. On some, the attackers left their own login key, so they could get back in even after the hole was patched. Among them were recorders running UniFi Video, the software Ubiquiti retired in 2021 in favor of UniFi Protect.
Keeping your devices up to date
Manufacturers close security flaws with firmware updates, and attackers scan for the devices that haven’t installed them. A device that misses its updates stays open to every attack already published against it, which is why updates need to go on regularly rather than when someone remembers.
Once a manufacturer stops supporting a device, the updates end, and every flaw found after that stays open for good. When a maker announces a device’s end of life, it’s time to replace it.
Why it takes a managed service provider
A managed service provider knows every device on your network and what to do when an unsafe one turns up. When we found the TVT recorder, we cut it off from the internet and isolated it, which keeps outsiders away for now, and recommended replacing it with a UniFi Protect recorder.
Every business system we install comes with a support plan. We keep its firmware current, and when a device nears its end of life, we schedule its replacement with you before it becomes a risk.
Looking to upgrade an older camera system or network? Book a call and we’ll help you plan your new system.
Sources
- CVE-2024-14007, CVE Program
- SSD Advisory – NVMS9000 Information Disclosure, SSD Secure Disclosure
- GreyNoise Observes 3X Surge in Exploitation Attempts Against TVT DVRs, GreyNoise
- skynox7: Proxyjacking Edge Devices Into Residential Proxies, GreyNoise
- UniFi-Video Products End of Life Announcement, Ubiquiti Community