AXIS Network Intercom I7020

AXIS Network Intercom I7020
Security Grade B Calculator v1	AXIS I7020 Network Intercom Brand: AXIS (Parent: Canon Inc. (Canon Group)) Category: Network intercom • Model / Gen: I7020 I7020 Release Date: 2024-11-20 • Status: In sale Classification Date: 2026-10-26 • Official Website

Security Evaluation

1. Device Security

Criterion	Value	Proof	Comment
Known hardware tampering	Rare	[https://help.axis.com/en-us/security-advisories https://help.axis.com/en-us/axis-i7020 🔗 Proof]	The model manual documents a physical control-button and power-cycle procedure that resets the device to factory defaults and clears configuration. Under the rubric's broad physical-access definition, Rare is a qualitative modification-capability rating, not a reported malicious I7020 incident or a measured frequency.
Known vulnerabilities	Rare	[https://www.axis.com/dam/public/48/ab/82/cve-2025-5454pdf-en-US-504213.pdf https://www.axis.com/products/axis-i7020/support https://help.axis.com/en-us/axis-os-release-notes-archive 🔗 Proof]	CVE-2025-5454 affected AXIS OS 12.0.0–12.6.17: a malicious unsigned ACAP application could exploit insufficient configuration validation for privilege escalation. Fixed in 12.6.18. Rare is a qualitative history label, not a vulnerability-count statistic.
Prior attacks	None	[https://help.axis.com/en-us/security-advisories https://www.axis.com/dam/public/48/ab/82/cve-2025-5454pdf-en-US-504213.pdf 🔗 Proof]	No model-specific malicious IoT campaign was identified in the bounded exact-model and Axis-advisory review as of 2026-10-24. Vulnerability research is not counted as an observed in-the-wild attack, and absence from this review does not establish universal absence.
Updatability	Very common	[https://www.axis.com/products/axis-i7020/support https://help.axis.com/en-us/axis-i7020 https://www.axis.com/products/axis-i7020 🔗 Proof]	Axis maintains downloadable AXIS OS updates and model-specific release notes. The product page commits software support until 2033-12-31; administrators can upgrade through the web interface or Axis Device Manager. This is an actively maintained product, not a promise of a fixed monthly cadence.
Category Score	Score: 2 / 3

2. System Security

Criterion	Value	Proof	Comment
Authentication with other systems	Partial	[https://www.axis.com/dam/public/4b/b8/b2/datasheet-axis-i7020-network-intercom-en-US-525595.pdf https://help.axis.com/en-us/axis-os-knowledge-base 🔗 Proof]	IEEE 802.1X/EAP-TLS supports certificate-based mutual authentication when a trusted CA, client certificate and key are configured. This is not mandatory for every supported integration; optional legacy and discovery traffic prevent a blanket full-authentication claim.
Communications	Encrypted with up-to-date encryption	[https://www.axis.com/dam/public/4b/b8/b2/datasheet-axis-i7020-network-intercom-en-US-525595.pdf https://help.axis.com/en-us/axis-i7020 https://help.axis.com/en-us/axis-os-web-interface-help 🔗 Proof]	TLS 1.2/1.3, HTTPS/HSTS and SIPS/SRTP protect configured management and intercom media paths. This rating assumes encrypted services and certificate validation are enabled and plaintext alternatives are disabled; it does not claim all factory-default or discovery traffic is encrypted.
Storage	Encrypted with up-to-date encryption	[https://www.axis.com/dam/public/4b/b8/b2/datasheet-axis-i7020-network-intercom-en-US-525595.pdf https://whitepapers.axis.com/en-us/axis-edge-vault 🔗 Proof]	The exact-model datasheet specifies an encrypted filesystem using AES-XTS-Plain64 with 256-bit encryption. Axis describes hardware-protected filesystem keys for persistent read/write data, including configuration. This assessment concerns internal flash data, not merely optional SD-recording encryption.
Category Score	Score: 2 / 3

3. User Authentication

Criterion	Value	Proof	Comment
Account management	Full	[https://help.axis.com/en-us/axis-i7020 https://help.axis.com/en-us/axis-os-web-interface-help 🔗 Proof]	AXIS OS supports distinct administrator, operator and viewer roles, creation of lower-privilege accounts, password changes, and account deletion. The exact-model manual directs administrators to the AXIS OS account-management interface.
Authentication	Basic	[https://help.axis.com/en-us/axis-i7020 https://www.axis.com/dam/public/4b/b8/b2/datasheet-axis-i7020-network-intercom-en-US-525595.pdf 🔗 Proof]	Local access uses administrator-created account credentials. Signed OS and secure boot protect software integrity, but are not a second user factor. A physical factory reset clears credentials and configuration, so Basic is the conservative local-authentication mapping rather than an unrestricted Secure claim.
Brute-force protection	Exist	[https://www.axis.com/dam/public/4b/b8/b2/datasheet-axis-i7020-network-intercom-en-US-525595.pdf https://help.axis.com/en-us/axis-os-knowledge-base 🔗 Proof]	AXIS OS can temporarily block a client IP after repeated failed HTTP(S) authentication. On 11.5 and later the default example is 20 failed attempts within one second followed by a 10-second block; thresholds are configurable. This is a documented attempt-limiting mechanism, not protection against every distributed attack.
Event logging	Access event logged	[https://help.axis.com/en-us/axis-i7020 https://help.axis.com/en-us/axis-os-knowledge-base 🔗 Proof]	The AXIS OS log system can record successful and failed device access. HTTP(S) success logging requires Access Log to be enabled; failed HTTP(S) attempts are logged only for an existing username. Remote syslog is recommended to retain records across resets and reboots.
Passwords	Require change after setup	[https://help.axis.com/en-us/axis-i7020 https://fehmijaafar.net/wiki-iot/index.php/Methodology 🔗 Proof]	First access requires creating an administrator account with a personal password; there is no default account on current AXIS OS. The middle label is used for mandatory initial credential provisioning. The model manual does not impose complexity or periodic password-change requirements; recommendations are not treated as enforcement.
Category Score	Score: 2 / 3

Technical Specifications

Property	Details
Operating System & App	AXIS OS (Companion App: AXIS Camera Station Edge / AXIS Camera Station Pro (optional management software))
Hardware (CPU / GPU)	CPU: CV25 SoC • GPU: Not applicable — audio endpoint, not a display-rendering computer
Memory & Storage	Memory: 2 GB RAM • Storage: 1 GB Flash; microSD/microSDHC/microSDXC card support; network-attached storage recording
Power, Battery & Charging	Battery: Not applicable — fixed-installation PoE-powered endpoint • Power: PoE IEEE 802.3at Type 2 Class 4; typical 3 W, maximum 25.5 W • Charging: Not applicable — powered through PoE, not a rechargeable portable product
Display & Camera	Display: Not applicable — call button and indicator LEDs, no user display • Camera: Not applicable — audio-only intercom; an external network camera can be paired
Sound & Connectivity	Sound: Two built-in microphones; built-in speaker up to 85 dB SPL at 1 m; full-duplex audio; line input/output • Connectivity: RJ45 10/100BASE-TX Ethernet with PoE; RS-485; configurable I/O and relay terminals; audio terminal block
Physical (Dimensions & Mass)	Dimensions: 123.9 × 123.9 × 43.7 mm (W × H × D; drawing overall dimensions) • Mass: 800 g

Evidence checked 2026-10-24. Exact I7020 hardware with supported, fully updated AXIS OS 12.x. Configuration-dependent rows assess a documented deployable hardened profile: HTTPS and encrypted media, trusted-certificate validation, plaintext services disabled, EAP-TLS where deployed, Access Log plus remote syslog enabled. They do not assert all defaults meet this profile. Historical CVEs are explicitly version-limited. The date field uses a dated official product video, not a claimed first-sale date.