Hikvision NDAA Info needed

[mywiresarecrossed]

Hello,

I am a newbie with NVR and IP cameras and just received a Hikvision DS-7616NI-I2/16p with ten 8mp 4k IP cameras PG2385I. Those cameras are not Hikvision brand though.

I understand that Hikvision NVRs and it's cameras are not NDAA compliant. But is it the hardware inside of the NVRs and cameras that makes them vulnerable to hackers, etc? Can firmware upgrades fix this compliance issue or is it the chipsets that's the root of the issue?

Thanks.

 

[Phil]

NDAA stands for National Defence Authorisation Act.
It is a USA government policy.
Effectively it determines what equipment Americans can buy and use.
A year or so ago they blacklisted Hikvision, Dahua, and others.

This is not specifically related to the equipment's vulnerability to hacking.

Hikvision maintain the firmware of their devices to protect against hacks.
They operate to the standard process of vulnerability reporting.
An example of how that process works can be seen here.

As far as can be known by the likes of us, if you keep your hardware updated to the latest available firmware you should be protected from hacks.

Wikipedia on NDAA here.

An in-depth guide on this topic from USA specialist here.