(
diff)
← Older revision | Approved revision (diff) | Latest revision (diff) | Newer revision → (diff)
| AXIS Dome Camera (P3267-LV)
|
|
Security Grade
Calculator v1
|
AXIS P3267-LV Dome Camera
Release Date: 2022-03-23 • Status: End of sale
|
Security Evaluation
1. Device Security
| Criterion
|
Value
|
Proof
|
Comment
|
| Known hardware tampering
|
Rare
|
[1] [2] 🔗 Proof
|
Historical patched ARTPEC-8 secure-boot bypasses: CVE-2023-21414 / CVE-2024-7784.
|
| Known vulnerabilities
|
Rare
|
[3] [4] 🔗 Proof
|
Historical flaws documented; assessed LTS is patched.
|
| Prior attacks
|
None
|
[5] 🔗 Proof
|
No model-specific attack located; a bounded finding, not proof of absence.
|
| Updatability
|
Very common
|
🔗 Proof
|
Successive firmware releases documented; assessed 11.11.220 LTS remains supported.
|
| Category Score
|
Score: 2 / 3
|
2. System Security
| Criterion
|
Value
|
Proof
|
Comment
|
| Authentication with other systems
|
Full
|
🔗 Proof
|
Mutual EAP-TLS and certificate-validated, authenticated integration are configured.
|
| Communications
|
Encrypted with up-to-date encryption
|
🔗 Proof
|
TLS 1.2/1.3 supported; encrypted-only service configuration assumed.
|
| Storage
|
Encrypted with up-to-date encryption
|
🔗 Proof
|
Internal filesystem: AES-XTS-Plain64 256-bit; removable-card encryption is separate.
|
| Category Score
|
Score: 1 / 3
|
3. User Authentication
| Criterion
|
Value
|
Proof
|
Comment
|
| Account management
|
Full
|
🔗 Proof
|
Accounts support roles, password updates and ordinary-account deletion.
|
| Authentication
|
Basic
|
🔗 Proof
|
Credentials protect configured access; physical factory reset replaces accounts without the previous password, limiting recovery assurance.
|
| Brute-force protection
|
Exist
|
🔗 Proof
|
Failed-login blocking/delay protection enabled.
|
| Event logging
|
Access event logged
|
[6] 🔗 Proof
|
Access-event logging enabled; failed logins recorded; remote retention configured.
|
| Passwords
|
Require change after setup
|
[7] 🔗 Proof
|
Administrator credentials must be created at first use; assessed 11.11 LTS does not enforce password complexity.
|
| Category Score
|
Score: 2 / 3
|
Technical Specifications
| Property
|
Details
|
| Operating System & App
|
AXIS OS 11.11.220 (LTS 2024; assessed supported version) (Companion App: AXIS Camera Station Edge / Pro / 5; browser interface)
|
| Hardware (CPU / GPU)
|
CPU: Axis ARTPEC-8 SoC; integrated deep learning processing unit (DLPU) • GPU:
|
| Memory & Storage
|
Memory: 2048 MB RAM; 8192 MB flash • Storage: microSD/microSDHC/microSDXC; network storage supported
|
| Power, Battery & Charging
|
Battery: No operational battery specified; PoE-powered • Power: IEEE 802.3af/802.3at Type 1 Class 3 PoE; 6.4 W typical; 9.0 W maximum • Charging: Not applicable (PoE)
|
| Display & Camera
|
Display: No integrated display specified • Camera: 5 MP; 2592 x 1944 at 25/30 fps; 1/2.7-inch CMOS; 3–8 mm F1.3 lens; infrared illumination
|
| Sound & Connectivity
|
Sound: External 3.5 mm microphone/line input; network speaker pairing; no built-in microphone in assessed variant • Connectivity: RJ45 10/100 Ethernet; one supervised digital input and one digital output
|
| Physical (Dimensions & Mass)
|
Dimensions: 107 mm height x 149 mm diameter • Mass: 800 g
|
Scope
Documentary assessment checked 2026-10-22, without physical-device testing. Assessed firmware: supported AXIS OS 11.11.220 LTS 2024. Configuration: unique accounts, anonymous access disabled, certificate-validated HTTPS and mutual EAP-TLS, encrypted media transport, unused plaintext services disabled, internal filesystem encryption, removable-storage encryption when used, brute-force protection and access logging enabled. The grade applies to this configured deployment. Newer AXIS OS password-policy and audit-log features are outside scope.
- Release date records a dated public announcement: 2022-03-23 (official announcement; first shipment date not established).
- Prior-attacks and Rare labels are qualitative research judgments, not measured occurrence rates.
- Unknown optional general/hardware fields remain blank; a blank is not evidence of absence.
- Final-order/discontinuation date: 2025-12-31. Hardware/RMA and software support: through 2031-12-31.
Scoring
Device: ceil((2+2+1+1)/4) = 2. System: ceil((1+1+1)/3) = 1. User Authentication: ceil((1+2+1+1+2)/5) = 2. GRAS = 2+1+2 = 5; grade A-. This is a contributor calculation, not administrator approval.
References
