Verkada CD52-E (CD52-E)
From Wiki-IoT
Revision as of 01:15, 26 October 2026 by Jeandecian (talk | contribs)
(diff) ← Older revision | Approved revision (diff) | Latest revision (diff) | Newer revision → (diff)
| Verkada CD52-E (CD52-E) | ||
|---|---|---|
|
Security Grade
Calculator v1
|
Verkada CD52-E (CD52-E)
Brand: Verkada Category: Camera • Model / Gen: CD52-E Release Date: 2020-01-01 • Status: In sale Classification Date: 2026-10-25 • Official Website | |
Contents
Security Evaluation
1. Device Security
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Known hardware tampering | None | — | Sealed dome camera; no documented hardware tampering. |
| Known vulnerabilities | Rare | — | No public CVE, but a hardcoded/exposed 'Super Admin' account enabled the 2021 breach. Source: www.bloomberg.com/news/articles/2021-03-11/verkada-workers-had-extensive-access-to-private-customer-cameras |
| Prior attacks | Rare | — | The March 2021 breach exposed ~150,000 live feeds (Tesla, Cloudflare, jails, hospitals). Source: www.theverge.com/2021/3/9/22322122/verkada-hack-150000-security-cameras-tesla-factory-cloudflare-jails-hospitals |
| Updatability | Very common | — | Cloud-managed with automatic, frequent firmware updates. Source: www.bbc.com/news/technology-56342525 |
| Category Score | Score: 2 / 3 | ||
2. System Security
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Authentication with other systems | Partial | — | Cloud/SSO based access, but the leaked Super Admin account bypassed normal authorization. Source: www.theverge.com/2021/3/9/22322122/verkada-hack-150000-security-cameras-tesla-factory-cloudflare-jails-hospitals |
| Communications | Encrypted with up-to-date encryption | — | All camera traffic to the Verkada cloud uses modern TLS. |
| Storage | Encrypted with up-to-date encryption | — | Footage stored in the encrypted Verkada cloud; the camera has no local SD storage. |
| Category Score | Score: 2 / 3 | ||
3. User Authentication
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Account management | Basic | — | Centralized account management exists but was over-permissioned (100+ staff had broad access). |
| Authentication | Basic | — | Supports SSO/SAML and two-factor authentication. |
| Brute-force protection | Exist | — | Enterprise-grade login throttling and account lockout. |
| Event logging | Access event logged | — | Audit logging records who accessed which camera feed. |
| Passwords | Require change after setup with complexity requirements | — | Enterprise password policy requiring complexity and rotation. |
| Category Score | Score: 2 / 3 | ||
Technical Specifications
| Property | Details |
|---|---|
| Operating System & App | (Companion App: ) |
| Hardware (CPU / GPU) | CPU: • GPU: |
| Memory & Storage | Memory: • Storage: |
| Power, Battery & Charging | Battery: • Power: • Charging: |
| Display & Camera | Display: • Camera: |
| Sound & Connectivity | Sound: • Connectivity: |
| Physical (Dimensions & Mass) | Dimensions: • Mass: |
