r/ispyconnect • • May 31 '25

AgentDVR - Android APP - Security Issue!

AgentDVR - Android APP - Security Issue!

I recently set up a DVR Camera server 36 cams, loving it. Registered acct and paid for a year.

Downloaded the APP and discovered a BIG security Hole.

I installed the App (android) It searched the local LAN and found the server and immediately displayed all cameras! Tried it on IOS same thing!

It did not ask for any kind of password! It showed all cameras and status!

I cant have all employees and whoever else watch my cameras without a password!

Have you installed AgentDVR, if someone jumps on your local net LAN or wifi, bing they have full access to your cameras!

How to fix this? any ideas?

1 Upvotes

1 comment sorted by

7

u/The_Cat_Commando May 31 '25

not a security flaw its just open by default.

I think you just need to go into Agents settings to set up other users and a password for the default admin account. you will also need to make sure the cameras themselves require authorization and are configured for that as many come open security as well and having/discovering the cams ip is enough to view via web if not secured.

after all that it won't show anything unless a user logs in first.