Update on XcodeGhost Malware and Our Commitment to Cyber Security

September 26, 2015


September 25, 2015



To Our Valued Customers and Partners,

At Hikvision, we strive to provide you with information needed to maintain the security of the Hikvision applications and systems that you use, install and/or sell. We wanted to provide you with additional information regarding a recent security issue with version 4.2.0 of the iVMS-4500 mobile application for iOS and to let you know that an updated version of the application is now available.

Specifically, we learned that version 4.2.0 of the iVMS-4500 application for iOS was one of several hundred popular applications that were impacted by the malware known as XcodeGhost. The version of the application that includes the malware was posted to the iOS App Store on September 3, 2015. Previous versions of the application are not affected and an updated version was made available on the iOS App Store on September 22, 2015. Per a statement on Apple’s website, they have no reason to believe that the malware has been used to cause actual harm.

The infected version of the application was quickly removed from the App Store, and we worked with Apple to upload an updated version of the application to the iOS App Store. Users should update to the latest version of iVMS-4500 and visit the Security Center on our website for more information.

The security needs of our customers and end-users are of the utmost importance. As such, Hikvision continues to evaluate and improve its software development processes for product applications.

We regret any inconvenience this incident may have caused you. If you have any questions, please don’t hesitate to contact your local sales engineer, or contact technical support at 909-612-9039 or techsupport.usa@hikvision.com


Update on Software Application Security.pdf


Sincerely,

Hikvision USA and Canada