Foscam C1 IP Camera

From Wiki-IoT
Revision as of 13:33, 23 October 2026 by JiaanDai20232871 (talk | contribs) (Foscam C1 is a very high-risk IP camera with default credentials, no encryption and no updates, earning an overall IDRS F rating.)
(diff) ← Older revision | Latest revision (diff) | Newer revision β†’ (diff)



Foscam C1 IP Camera
Security Grade
   
     F
   
Calculator v
Foscam C1 HD IP Camera
   Category: IP Camera / Surveillance IoT Device • Model / Gen: 1st Generation C1
   Release Date: 2016-01-15 • Status: End of sale
   Classification Date:  • Official Website

Security Evaluation

1. Device Security

Criterion Value Proof Comment
Known hardware tampering Rare πŸ”— Proof Software exploits are far more common than hardware tampering.
Known vulnerabilities Very common πŸ”— Proof Multiple critical command injection vulnerabilities; widely documented.
Prior attacks Very common πŸ”— Proof Well-known Mirai botnet target; mass scanning and exploitation.
Updatability None πŸ”— Proof Product is end-of-life; no further security firmware updates.
Category Score Score: 3 / 3

2. System Security

Criterion Value Proof Comment
Authentication with other systems Partial πŸ”— Proof Partial third-party NVR integration only.
Communications No encryption πŸ”— Proof Default HTTP video stream; no mandatory encryption.
Storage No encryption πŸ”— Proof Local SD card recording with no encryption.
Category Score Score: 3 / 3

3. User Authentication

Criterion Value Proof Comment
Account management Basic πŸ”— Proof Basic local device account only.
Authentication Basic πŸ”— Proof Default admin credentials widely known; users rarely change them.
Brute-force protection Absent πŸ”— Proof No brute-force lockout; credential stuffing attacks common.
Event logging Partial logging πŸ”— Proof Basic motion logging; no full access audit log.
Passwords Default/Common/Easy to guess πŸ”— Proof Default admin/admin credentials shipped with device.
Category Score Score: 3 / 3

Technical Specifications

Property Details
Operating System & App Foscam embedded firmware (Companion App: Foscam Client (iOS / Android / PC))
Hardware (CPU / GPU) CPU: ARM9 single-core SoC • GPU: N/A
Memory & Storage Memory: 64 MB RAM • Storage: 16 MB flash; microSD card slot
Power, Battery & Charging Battery: N/A (DC power adapter) • Power: 5 V DC 1A • Charging: N/A
Display & Camera Display: No display; status LEDs • Camera: 720p HD CMOS sensor, 115Β° FOV, night vision
Sound & Connectivity Sound: Built-in mic + speaker • Connectivity: Wi-Fi 4 2.4 GHz, Ethernet
Physical (Dimensions & Mass) Dimensions: 86 Γ— 62 Γ— 62 mm • Mass: 150 g


The Foscam C1 is a discontinued low-cost IP camera and a well-known target of the Mirai botnet. It ships with default admin credentials, transmits unencrypted video streams, and no longer receives security updates. Attackers can remotely take full control of the camera, view live footage, and recruit it into DDoS botnets.