Slovakia’s national security agency has issued an alert regarding NERO R-ONE traffic cameras, which contain a Russian-linked backdoor allowing unauthorized network access via hardcoded SMS commands.

Key Points

• The NBU identified the cameras as rebranded CORDON PRO.M devices manufactured by the Russian firm Semicon.
• Security analysis revealed a backdoor triggered by SMS messages from hardcoded Russian phone numbers.
• Technical flaws include disabled SecureBoot, vulnerable web management portals, and unencrypted live video streams.
• The Interior Ministry paused the deployment of 279 cameras purchased for a €30 million EU-funded traffic monitoring project.
• Similar devices are reportedly installed in Croatia and other Eastern European nations.

Why it Matters

This incident highlights the significant national security risks associated with integrating foreign-manufactured hardware into critical infrastructure. The discovery of backdoors in government-procured equipment underscores the urgent need for rigorous supply chain vetting and independent security audits for public sector technology projects.