iVMS-4500 Version 4.2.0 Affected by Malware

September 24, 2015

September 21, 2015

To Our Valued Partners and Customers:

We have recently become aware that our iVMS-4500, version 4.2.0, which was available on the iOS App Store as of September 2, 2015, has been affected by malware. This malware, dubbed XcodeGhost, may expose basic user information such as application name, installation time, language, and country. As such, Hikvision has removed iVMS-4500 version 4.2.0 from the App Store; it is no longer available for download. It is imperative that users delete v4.2.0 from their Apple devices. This malware did not affect the Android OS; therefore you may continue to use iVMS-4500 v4.2.0 on your Android devices. We have confirmed that versions of iVMS-4500 prior to v4.2.0 are not affected on either OS.

To ensure the safety and privacy of our customers, we have created a new version of iVMS-4500: v4.2.1. This has been submitted to the iOS App Store for certification. We expect v4.2.1 to be available for download by October 1, 2015 at the latest, but it may be available as early as September 23, 2015. We will notify you as soon as v4.2.1 is available.

We apologize for any inconvenience this may have caused you. The security needs of our customers and end users are of the utmost importance to us. If you have any questions, please don’t hesitate to contact your local sales engineer, or contact technical support at 909-612-9039 or techsupport.usa@hikvision.com.

Hikvision USA and Canada

UPDATE – September 24, 2015: Users should update their current iVMS-4500 version 4.2.0 app to version 4.2.1