Foscam C1 (FI9821W)
From Wiki-IoT
Revision as of 14:53, 23 October 2026 by Changlei (talk | contribs) (Created page with "{{Classification |name=Foscam C1 (FI9821W) |brand=Foscam |parent_company=Foscam |website=https://www.foscam.com/ |release_date=2014-01-06 |generation=C1 |model=FI9821W |type=S...")
(diff) ← Older revision | Approved revision (diff) | Latest revision (diff) | Newer revision → (diff)
| Foscam C1 (FI9821W) | ||
|---|---|---|
|
Security Grade
Calculator v
|
Foscam C1 (FI9821W)
Category: Security Camera • Model / Gen: C1 FI9821W Release Date: 2014-01-06 • Status: In sale Classification Date: • Official Website | |
Contents
Security Evaluation
1. Device Security
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Known hardware tampering | Very common | 🔗 Proof | Exposed reset button; indoor camera easy to physically access |
| Known vulnerabilities | Very common | 🔗 Proof | CVE-2017-2855 buffer overflow in DDNS client (CVSS 8.1); hard-coded factory password "Ak47@99"; hard-coded SSL private key CVE-2017-7648 |
| Prior attacks | Very common | 🔗 Proof | Foscam cameras explicitly named among default-credential devices hijacked by Mirai botnet in 2016 |
| Updatability | None | 🔗 Proof | Legacy firmware; no meaningful updates for this model |
| Category Score | Score: 3 / 3 | ||
2. System Security
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Authentication with other systems | No | 🔗 Proof | Web interface exposed to LAN with default credentials; no mutual auth |
| Communications | No encryption | 🔗 Proof | Same hard-coded SSL private key across all installations; HTTP by default |
| Storage | No encryption | 🔗 Proof | Hard-coded factory account "Ak47@99" in firmware |
| Category Score | Score: 3 / 3 | ||
3. User Authentication
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Account management | Absent | 🔗 Proof | Local web UI only; no cloud account model |
| Authentication | Absent | 🔗 Proof | Hard-coded factory account; default admin/(blank) or admin/123456 |
| Brute-force protection | Absent | 🔗 Proof | No lockout or rate limiting |
| Event logging | Absent | 🔗 Proof | Minimal logs; no access audit |
| Passwords | Default/Common/Easy to guess | 🔗 Proof | Factory default admin/(blank); user guide itself documents this |
| Category Score | Score: 3 / 3 | ||
Technical Specifications
| Property | Details |
|---|---|
| Operating System & App | Embedded Linux (Companion App: Foscam) |
| Hardware (CPU / GPU) | CPU: • GPU: |
| Memory & Storage | Memory: • Storage: microSD slot |
| Power, Battery & Charging | Battery: No battery (plugged in) • Power: 5V DC power adapter • Charging: N/A |
| Display & Camera | Display: `No display` • Camera: 720p HD, 115-degree FOV, night vision |
| Sound & Connectivity | Sound: Built-in microphone, speaker • Connectivity: Wi-Fi 802.11b/g/n |
| Physical (Dimensions & Mass) | Dimensions: 2.8 x 2.8 x 4.3 inches • Mass: 0.5 lbs (227 g) |
