| D-Link DCS-930L Camera (DCS-930L) | ||
|---|---|---|
|
Security Grade
Calculator v
|
D-Link DCS-930L Wireless Network Camera
Brand: D-Link (Parent: D-Link Corporation) Category: IP security camera • Model / Gen: 1st DCS-930L Release Date: 2012-05-01 • Status: End of life Classification Date: • Official Website | |
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Known hardware tampering | Rare | 🔗 Proof | Device teardown is possible, large-scale physical tampering incidents are rare |
| Known vulnerabilities | Very common | 🔗 Proof | 1. Multiple critical vulnerabilities including hardcoded credentials and remote command execution 2. |
| Prior attacks | Very common | [`https://nvd.nist.gov/vuln/detail/CVE-2015-2051` 🔗 Proof] | This camera was widely targeted by botnets such as Mirai |
| Updatability | Rare | 🔗 Proof | End of life, D-Link stopped releasing security firmware patches |
| Category Score | Score: 3 / 3 | ||
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Authentication with other systems | Partial | 🔗 Proof | Works with mydlink cloud, limited third-party platform integration |
| Communications | No encryption | 🔗 Proof | Video and some control traffic can transmit over unencrypted HTTP |
| Storage | No encryption | 🔗 Proof | 1. Configuration and credential data stored locally without encryption |
| Category Score | Score: 3 / 3 | ||
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Account management | Basic | 🔗 Proof | Only basic admin password setting, limited user management |
| Authentication | Basic | 🔗 Proof | Simple password authentication, no 2FA support |
| Brute-force protection | Absent | 🔗 Proof | No rate limiting against password brute force attempts |
| Event logging | Absent | 🔗 Proof | The device does not record access or motion audit logs |
| Passwords | Default/Common/Easy to guess | 🔗 Proof | Famous for default admin credentials, widely exploited by botnets |
| Category Score | Score: 3 / 3 | ||
| Property | Details |
|---|---|
| Operating System & App | D-Link proprietary RTOS (Companion App: mydlink Lite) |
| Hardware (CPU / GPU) | CPU: Not publicly disclosed • GPU: Not publicly disclosed |
| Memory & Storage | Memory: Not publicly disclosed • Storage: Not publicly disclosed |
| Power, Battery & Charging | Battery: None • Power: DC 5 V power adapter • Charging: Not applicable |
| Display & Camera | Display: None • Camera: 640×480 VGA camera, no infrared night vision |
| Sound & Connectivity | Sound: Built-in microphone, no speaker • Connectivity: Wi‑Fi 802.11 b/g/n, 2.4 GHz |
| Physical (Dimensions & Mass) | Dimensions: 105 × 105 × 132 mm • Mass: 180 g |
> This is an old EOL VGA IP camera. It has serious well-known vulnerabilities and was compromised by Mirai botnet. It lacks traffic encryption, access logs, brute force protection and strong authentication.
