TV-IP410

TV-IP410
Security Grade F Calculator v1	TV-IP410 Brand: TRENDnet Category: Wired Pan/Tilt MJPEG Internet camera server • Model / Gen: TV-IP410 (wired, H/W A1.0R; last firmware 1.1.2 dated 2013-10-10) Release Date: 2008-05-28 • Status: End of sale Classification Date: 2026-10-23 • [downloads.trendnet.com/TV-IP410/ Official Website]

Security Evaluation

1. Device Security

Criterion	Value	Proof	Comment
Known hardware tampering	Rare	[downloads.trendnet.com/TV-IP410/manual/ug_tv-ip410_tv-ip410w(a1.0r).pdf 🔗 Proof]	documentary assessment, NOT device testing: user guide documents only a rear-panel reset pinhole and no tamper enclosure; physical tampering exposure is not commonly documented for this 2008 camera (A1.0R user guide scope).
Known vulnerabilities	Very common	[nvd.nist.gov/vuln/detail/CVE-2024-46484 🔗 Proof]	documentary assessment, NOT device testing: NVD records CVE-2024-46484 unauthenticated OS command injection via /server/cgi-bin/testserv.cgi on TV-IP410 vA1.0R (CWE-78, CVSS 3.1 9.8 Critical); no vendor patch issued (A1.0R firmware scope).
Prior attacks	Rare	[nvd.nist.gov/vuln/detail/CVE-2024-46484 🔗 Proof]	documentary assessment, NOT device testing: a third-party PoC gist is referenced by NVD, but no publicly documented large-scale in-the-wild compromise campaign specific to the TV-IP410 was found; assessment limited to vA1.0R.
Updatability	None	[downloads.trendnet.com/TV-IP410/firmware/ 🔗 Proof]	documentary assessment, NOT device testing: official firmware host stops at FW_TV-IP410_A1.x(1.1.2) uploaded 2013-10-10; the product page is discontinued/unavailable and no fix for CVE-2024-46484 exists; security maintenance has ended (A1.0R scope).
Category Score	Score: 3 / 3

2. System Security

Criterion	Value	Proof	Comment
Authentication with other systems	No	[nvd.nist.gov/vuln/detail/CVE-2024-46484 🔗 Proof]	documentary assessment, NOT device testing: the vulnerable testserv.cgi component is reachable without credentials (PR:N), and the device has no cloud or third-party identity integration; cross-system authentication is absent (vA1.0R scope).
Communications	No encryption	[downloads.trendnet.com/TV-IP410/manual/ug_tv-ip410_tv-ip410w(a1.0r).pdf 🔗 Proof]	documentary assessment, NOT device testing: user guide shows HTTP port 80 management and the browser explicitly warns that credentials are "sent in an insecure manner (basic authentication without a secure connection)"; MJPEG stream also unencrypted (A1.0R user guide scope).
Storage	No encryption	[downloads.trendnet.com/TV-IP410/manual/ug_tv-ip410_tv-ip410w(a1.0r).pdf 🔗 Proof]	documentary assessment, NOT device testing: camera has no onboard storage; snapshots/recording land on the client PC via SecurView, and no encryption feature is documented (A1.0R user guide scope).
Category Score	Score: 3 / 3

3. User Authentication

Criterion	Value	Proof	Comment
Account management	Basic	[downloads.trendnet.com/TV-IP410/manual/ug_tv-ip410_tv-ip410w(a1.0r).pdf 🔗 Proof]	documentary assessment, NOT device testing: Basic>User supports Administrator, General User and Guest accounts with local add/modify/delete, but no roles policy or account lifecycle management (A1.0R user guide scope).
Authentication	Basic	[downloads.trendnet.com/TV-IP410/manual/ug_tv-ip410_tv-ip410w(a1.0r).pdf 🔗 Proof]	documentary assessment, NOT device testing: single-factor HTTP basic authentication; no MFA or secure credential exchange (A1.0R user guide scope).
Brute-force protection	Absent	[downloads.trendnet.com/TV-IP410/manual/ug_tv-ip410_tv-ip410w(a1.0r).pdf 🔗 Proof]	documentary assessment, NOT device testing: user guide documents no login lockout, rate limiting or captcha; brute-force protection absent (A1.0R user guide scope).
Event logging	Partial logging	[downloads.trendnet.com/TV-IP410/manual/ug_tv-ip410_tv-ip410w(a1.0r).pdf 🔗 Proof]	documentary assessment, NOT device testing: Information menu shows a system/events log, but it is a local diagnostic log without centralized audit; partial logging (A1.0R user guide scope).
Passwords	Default/Common/Easy to guess	[downloads.trendnet.com/TV-IP410/manual/ug_tv-ip410_tv-ip410w(a1.0r).pdf 🔗 Proof]	documentary assessment, NOT device testing: default administrator ID/password is admin/admin and the wizard explicitly allows leaving the password blank; no forced complexity (A1.0R user guide and QIG scope).
Category Score	Score: 3 / 3

Technical Specifications

Property	Details
Operating System & App	Proprietary embedded firmware (MJPEG; .pck firmware package; GoAhead-class webserver) (Companion App: )
Hardware (CPU / GPU)	CPU: • GPU:
Memory & Storage	Memory: • Storage:
Power, Battery & Charging	Battery: • Power: • Charging:
Display & Camera	Display: • Camera:
Sound & Connectivity	Sound: • Connectivity:
Physical (Dimensions & Mass)	Dimensions: • Mass: