ON-DMI-50BP Security Vulnerability Scan | EXVIST Support

Security Vulnerability Scan Report: ON-DMI-50BP Video Encoder/Decoder

Overview

This article documents the preliminary vulnerability scan and risk assessment conducted on the EXVIST ON-DMI-50BP Video Encoder/Decoder (Firmware Version: V3.01.21.260720). This scan serves as the **first step** in our ongoing product security testing process, establishing a security baseline for the device and identifying exposed services and known vulnerability risks.

📺 Watch the Full Test Video:

Test Environment & Configuration

  1. Test Product:  ON-DMI-50BP 1080P PoE HDMI Encoder/Decoder (Dual USB, 4-Channel RTSP) |
  2. Firmware Version: V3.01.21.260720
  3. Testing Tool: Nmap
  4. Test Command: nmap -T4 -A -d -v --script vuln 192.168.1.219
  5. Video Source: HDMI Signal Generator (continuously displaying dynamic content)
  6. Stability Monitoring: Simultaneous `ping 192.168.1.219 -t`
  7. Pre-Test Steps: Updated to latest firmware; restored to factory default settings

Test Objectives

  1. Identify open ports and services exposed by the device
  2. Detect known vulnerability risks using Nmap `vuln` scripts
  3. Verify device stability under scanning pressure
  4. Establish a security baseline for the ON-DMI-50BP product

Test Procedure

  1. Test Preparation & Device Introduction – Setting up the testing environment and introducing the ON-DMI-50BP encoder/decoder.
  2. Firmware Version Confirmation & Factory Reset – Verifying the current firmware version and resetting to factory defaults for a clean test state.
  3. HDMI Signal Source Connection & Network Configuration – Connecting the HDMI signal generator and configuring network settings.
  4. Launching ping Command for Device Stability Monitoring – Initiating continuous ping to monitor device responsiveness throughout the scan.
  5. Executing Nmap Vulnerability Scan Command – Running the vulnerability scan with the specified Nmap command.
  6. Scan Progress & Device Operational Status Observation – Monitoring the device's operational status during the scan.
  7. Preliminary Scan Results Analysis – Reviewing the initial findings from the vulnerability scan.
  8. Device Stability Verification (ping Results Confirmation) – Confirming that the device remained stable throughout the scanning process.
  9. Test Summary & Next Steps in Security Testing – Summarizing findings and outlining the next phases of security testing.

Results Summary

The preliminary vulnerability scan successfully:
  1. Identified open ports and services exposed on the ON-DMI-50BP
  2. Detected potential vulnerability risks using Nmap's `vuln` script engine
  3. Confirmed device stability under scan load (verified via continuous ping monitoring)
For detailed findings, please refer to the full video walkthrough linked above.