(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
| Wyze Cam v3 (WYZE CAKP2JFUS)
|
|
Security Grade
Calculator v
|
Wyze Cam v3
Release Date: 2020-09-20 • Status: In sale
|
Security Evaluation
1. Device Security
| Criterion
|
Value
|
Proof
|
Comment
|
| Known hardware tampering
|
Rare
|
🔗 Proof
|
Only a physical-proximity attack via a malicious setup QR code (CVE-2024-6247); no teardown or hardware tampering reports found.
|
| Known vulnerabilities
|
Very common
|
🔗 Proof
|
Multiple CVEs: CVE-2019-9564, CVE-2019-12266, CVE-2023-6322 and CVE-2024-6246 to 6249 (several allow remote code execution).
|
| Prior attacks
|
Rare
|
🔗 Proof
|
Public proof-of-concept exploit (Oct 2023); no in-the-wild attack campaigns found.
|
| Updatability
|
Very common
|
🔗 Proof
|
Wyze patched the 2023 flaws with firmware 4.36.11.7071; the 2024 CVEs affect versions before 4.36.11.8391.
|
| Category Score
|
Score: 2 / 3
|
2. System Security
| Criterion
|
Value
|
Proof
|
Comment
|
| Authentication with other systems
|
Partial
|
🔗 Proof
|
Cloud endpoint used the device MAC address as sole credential (CVE-2024-6248); a DTLS authentication bypass was also found (2023).
|
| Communications
|
Encrypted with up-to-date encryption
|
🔗 Proof
|
Uses DTLS for device communication, but a DTLS authentication bypass allowed arbitrary pre-shared keys (fixed Oct 2023).
|
| Storage
|
Encrypted with obselete encryption
|
—
|
|
| Category Score
|
Score: 2 / 3
|
3. User Authentication
| Criterion
|
Value
|
Proof
|
Comment
|
| Account management
|
Full
|
—
|
Cameras are managed through a Wyze account and the Wyze app.
|
| Authentication
|
Basic
|
🔗 Proof
|
Sept 2023 and Feb 2024 incidents showed other users' event thumbnails to wrong accounts; Wyze added an extra verification layer.
|
| Brute-force protection
|
Basic
|
—
|
No public documentation found.
|
| Event logging
|
Partial logging
|
—
|
App shows camera events; no documented account-access log found.
|
| Passwords
|
Require change after setup
|
—
|
No default device password found; users sign in with their own Wyze account password.
|
| Category Score
|
Score: 2 / 3
|
Technical Specifications
| Property
|
Details
|
| Operating System & App
|
(Companion App: Wyze)
|
| Hardware (CPU / GPU)
|
CPU: Not disclosed • GPU: Not disclosed
|
| Memory & Storage
|
Memory: Not disclosed • Storage: microSD (up to 256 GB, exFAT) and cloud
|
| Power, Battery & Charging
|
Battery: None • Power: 5 V / 1 A USB adapter, 1.8 m cable • Charging: N/A
|
| Display & Camera
|
Display: None (LED indicator) • Camera: 1080p CMOS starlight sensor, 121° diagonal, IR night vision
|
| Sound & Connectivity
|
Sound: ECM microphone, 80 dB speaker, siren, two-way talk • Connectivity: 2.4 GHz Wi-Fi
|
| Physical (Dimensions & Mass)
|
Dimensions: 52 × 51 × 58.5 mm • Mass: 98.8 g
|
Wyze Cam v3 is a low-cost Wi-Fi security camera. It has many published vulnerabilities, including remote code execution flaws (CVE-2023-6322, CVE-2024-6246 to 6249), which Wyze patched through firmware updates. Cloud incidents in 2023 and 2024 exposed other users' camera thumbnails. Strengths are regular firmware updates and local microSD recording.
