(diff) β Older revision | Latest revision (diff) | Newer revision β (diff)
| Arlo VMS3130 Camera (VMC3030)
|
|
Security Grade
Calculator v
|
Arlo Wire-Free Security Camera VMS3130
Release Date: 2014-01-01 • Status: End of life
|
Security Evaluation
1. Device Security
| Criterion
|
Value
|
Proof
|
Comment
|
| Known hardware tampering
|
Rare
|
π Proof
|
Physical disassembly is possible, widespread physical tampering is rare
|
| Known vulnerabilities
|
Very common
|
π Proof
|
Vulnerabilities include insecure communication between camera and base station
|
| Prior attacks
|
Rare
|
π Proof
|
Research-style exploits exist, mass exploitation incidents are uncommon
|
| Updatability
|
Rare
|
π Proof
|
End of life, Arlo stopped releasing new security firmware patches
|
| Category Score
|
Score: 3 / 3
|
2. System Security
| Criterion
|
Value
|
Proof
|
Comment
|
| Authentication with other systems
|
Full
|
π Proof
|
Fully integrated with Arlo cloud and mobile app ecosystem
|
| Communications
|
Encrypted with obselete encryption
|
π Proof
|
Camera-base station link uses older encryption schemes
|
| Storage
|
Encrypted with obselete encryption
|
π Proof
|
Credentials stored on base station with outdated encryption
|
| Category Score
|
Score: 2 / 3
|
3. User Authentication
| Criterion
|
Value
|
Proof
|
Comment
|
| Account management
|
Full
|
π Proof
|
Complete user and camera management inside Arlo app
|
| Authentication
|
Secure
|
π Proof
|
Arlo cloud account supports two-factor authentication
|
| Brute-force protection
|
Exist
|
π Proof
|
Cloud-side rate limiting blocks brute force login attempts
|
| Event logging
|
Access event logged
|
π Proof
|
Motion detection and camera access events saved in cloud history
|
| Passwords
|
Require change after setup with complexity requirements
|
π Proof
|
Arlo account enforces password complexity rules
|
| Category Score
|
Score: 1 / 3
|
Technical Specifications
| Property
|
Details
|
| Operating System & App
|
Arlo proprietary firmware (Companion App: Arlo)
|
| Hardware (CPU / GPU)
|
CPU: Not publicly disclosed • GPU: Not publicly disclosed
|
| Memory & Storage
|
Memory: Not publicly disclosed • Storage: Not publicly disclosed
|
| Power, Battery & Charging
|
Battery: Rechargeable lithium battery • Power: Battery powered • Charging: Micro USB charging
|
| Display & Camera
|
Display: None • Camera: 720p camera, infrared night vision
|
| Sound & Connectivity
|
Sound: Built-in microphone, no speaker • Connectivity: Proprietary RF to Arlo base station
|
| Physical (Dimensions & Mass)
|
Dimensions: 73 Γ 73 Γ 111 mm • Mass: 140 g
|
This is an EOL battery-powered Arlo security camera. It communicates with a base station using outdated encryption. Cloud account security is relatively strong, but local RF link has known security weaknesses.