Eufy Security Video Doorbell 2K (T8200X21)

Eufy Security Video Doorbell 2K (T8200X21)
Security Grade F Calculator v	Eufy Security Video Doorbell 2K Brand: Eufy (Parent: Anker Innovations) Category: Camera • Model / Gen: T8200X21 Release Date: 2020-09-01 • Status: Classification Date: • Official Website

Security Evaluation

1. Device Security

Criterion	Value	Proof	Comment
Known hardware tampering	None	—
Known vulnerabilities	Very common	🔗 Proof
Prior attacks	Rare	🔗 Proof
Updatability	None	—
Category Score	Score: 3 / 3

2. System Security

Criterion	Value	Proof	Comment
Authentication with other systems	Partial	—
Communications	Encrypted with obselete encryption	—
Storage	No encryption	—
Category Score	Score: 3 / 3

3. User Authentication

Criterion	Value	Proof	Comment
Account management	Basic	—
Authentication	Basic	🔗 Proof
Brute-force protection	Absent	—
Event logging	Partial logging	—
Passwords	Default/Common/Easy to guess	—
Category Score	Score: 3 / 3

Technical Specifications

Property	Details
Operating System & App	(Companion App: )
Hardware (CPU / GPU)	CPU: ARM Cortex-A7 • GPU:
Memory & Storage	Memory: 256MB RAM • Storage: 4GB eMMC
Power, Battery & Charging	Battery: Li-ion, 6700 mAh • Power: 5V DC adapter • Charging:
Display & Camera	Display: None • Camera: 2K (2304 x 1296)
Sound & Connectivity	Sound: • Connectivity:
Physical (Dimensions & Mass)	Dimensions: None • Mass: None

CVE-2021-42909 is an improper authentication flaw in Anker Eufy Doorbell 2K (CVSS 8.6, High). During the initial setup, the device exposes an open Wi-Fi access point protected only by the device serial number, which can be learned from the sticker on the device. A nearby attacker can join the setup network and read the owner's Wi-Fi credentials in plain text. The doorbell also streams live video and audio from the front door, so a compromise directly exposes the home's physical security.