ON-DMI-50BP Security Vulnerability Scan | EXVIST Support

Security Vulnerability Scan Report: ON-DMI-50BP Video Encoder/Decoder

Overview

This article documents the preliminary vulnerability scan and risk assessment conducted on the EXVIST ON-DMI-50BP Video Encoder/Decoder (Firmware Version: V3.01.21.260720). This scan serves as the **first step** in our ongoing product security testing process, establishing a security baseline for the device and identifying exposed services and known vulnerability risks.

📺 Watch the Full Test Video:

Test Environment & Configuration

  1. Test Product:  ON-DMI-50BP 1080P PoE HDMI Encoder/Decoder (Dual USB, 4-Channel RTSP) |
  2. Firmware Version: V3.01.21.260720
  3. Testing Tool: Nmap
  4. Test Command: nmap -T4 -A -d -v --script vuln 192.168.1.219
  5. Video Source: HDMI Signal Generator (continuously displaying dynamic content)
  6. Stability Monitoring: Simultaneous `ping 192.168.1.219 -t`
  7. Pre-Test Steps: Updated to latest firmware; restored to factory default settings

Test Objectives

  1. Identify open ports and services exposed by the device
  2. Detect known vulnerability risks using Nmap `vuln` scripts
  3. Verify device stability under scanning pressure
  4. Establish a security baseline for the ON-DMI-50BP product

Test Procedure

  1. Test Preparation & Device Introduction – Setting up the testing environment and introducing the ON-DMI-50BP encoder/decoder.
  2. Firmware Version Confirmation & Factory Reset – Verifying the current firmware version and resetting to factory defaults for a clean test state.
  3. HDMI Signal Source Connection & Network Configuration – Connecting the HDMI signal generator and configuring network settings.
  4. Launching ping Command for Device Stability Monitoring – Initiating continuous ping to monitor device responsiveness throughout the scan.
  5. Executing Nmap Vulnerability Scan Command – Running the vulnerability scan with the specified Nmap command.
  6. Scan Progress & Device Operational Status Observation – Monitoring the device's operational status during the scan.
  7. Preliminary Scan Results Analysis – Reviewing the initial findings from the vulnerability scan.
  8. Device Stability Verification (ping Results Confirmation) – Confirming that the device remained stable throughout the scanning process.
  9. Test Summary & Next Steps in Security Testing – Summarizing findings and outlining the next phases of security testing.

Results Summary

The preliminary vulnerability scan successfully:
  1. Identified open ports and services exposed on the ON-DMI-50BP
  2. Detected potential vulnerability risks using Nmap's `vuln` script engine
  3. Confirmed device stability under scan load (verified via continuous ping monitoring)
For detailed findings, please refer to the full video walkthrough linked above.
    • Related Articles

    • FAQs: Video of Codec

      Channel: CH1~CH8 How many channels can I configure for video settings on my HDMI codec? The number of channels you can configure for video settings depends on the specific model of your codec. For example, in the SS50 MS7 Codec Series, only CH1~CH4, ...
    • Datasheet of ON-DMI-16DM

      Overview EXVIST Network Decoder with Mini HDMI Output Only The ON-DMI-16DM is a specialized video decoder designed to seamlessly convert IP signals from various sources such as IP cameras and encoders into Mini HDMI output. But it does NOT support ...
    • Datasheet of ON-DMI-50D

      Overview 1080P Basic HDMI Encoder|Decoder w/Screen, HDMI Loopout, Dual USB2.0 The ON-DMI-50D is a versatile 1080P HDMI encoder/decoder with a loopout feature, a screen for displaying IP, and dual USB2.0 ports for webcam connectivity and recording. It ...
    • Datasheet of ON-DMI-50BP

      Overview EXVIST PoE HDMI Encoder Decoder w/Loopout & Dual USB2.0 The ON-DMI-50BP is a PoE HDMI encoder/decoder with loopout and dual USB2.0 ports, offering flexibility and convenience in powering via PoE or DC12V, suitable for high-efficiency ...
    • Datasheet of ON-DMI-50BW

      Overview EXVIST WiFi HDMI Encoder Decoder w/Loopout & Dual USB2.0 The ON-DMI-50BW is a high-performance WiFi HDMI encoder/decoder with loopout and dual USB2.0 ports, perfect for streaming multiple images to YouTube and other platforms. With support ...