TP-Link Tapo D235 (V1)

From Wiki-IoT
Revision as of 14:19, 24 October 2026 by 20232849 (talk | contribs) (Initial security classification with official specifications, firmware records and security advisories)
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)



TP-Link Tapo D235 (V1)
Security Grade
   
     B
Calculator v
TP-Link Tapo D235 (V1)
   Category: Video Doorbell • Model / Gen:  Tapo D235 V1

   Release Date: 2024-06-11 • Status: In sale

   Classification Date:  • Official Website

Security Evaluation

1. Device Security

Criterion Value Proof Comment
Known hardware tampering Rare 🔗 Proof The outdoor doorbell is physically exposed and can be removed from its bracket, but it includes an anti-theft button and alarm. No very-common model-specific hardware-tampering history was located.
Known vulnerabilities Very common https://www.tp-link.com/nordic/support/faq/5106/ 🔗 Proof TP-Link explicitly identifies Tapo D235 V1 as affected by CVE-2026-0651 and CVE-2026-0653. A separate advisory also lists the D100C chime supplied with D235 as affected by CVE-2026-34126.
Prior attacks None 🔗 Proof The advisories confirm software vulnerabilities but do not confirm a real-world attack campaign against this model. Responsible vulnerability disclosure is not treated as evidence of prior attacks.
Updatability Very common 🔗 Proof TP-Link provides multiple Tapo D235 V1 firmware releases with feature improvements, security enhancements and vulnerability fixes.
Category Score Score: 2 / 3

2. System Security

Criterion Value Proof Comment
Authentication with other systems Partial https://www.tp-link.com/ca/support/faq/4391/ 🔗 Proof Tapo account authentication and same-account pairing are supported, but full mutual authentication for every local, RTSP, chime, hub and cloud interface is not publicly demonstrated.
Communications Encrypted with up-to-date encryption https://www.tp-link.com/us/support/faq/4336/ 🔗 Proof The specifications document 128-bit AES encryption with SSL/TLS and WPA/WPA2-PSK. Users should nevertheless install the latest firmware because of separately disclosed setup and software vulnerabilities.
Storage Encrypted with up-to-date encryption https://www.tp-link.com/us/document/15120/ 🔗 Proof TP-Link states that AES-128 and TLS 1.2 protect sensitive information, including camera footage and user identity data, during storage and transmission. Local microSD and Tapo Care storage are supported.
Category Score Score: 2 / 3

3. User Authentication

Criterion Value Proof Comment
Account management Basic 🔗 Proof The owner can invite other TP-Link accounts and remove shared access. Shared users have limited permissions, but comprehensive role-based account administration is not provided.
Authentication Secure 🔗 Proof Tapo provides optional Two-Step Verification using time-sensitive verification codes delivered through a trusted device or the registered email address.
Brute-force protection Basic 🔗 Proof Two-Step Verification reduces unauthorized account access, but exact password-attempt limits or lockout thresholds are not publicly specified; a conservative score is used.
Event logging Access event logged 🔗 Proof The Tapo app provides Login Activity, trusted-device management and new-login notifications, allowing users to review account access events.
Passwords Require change after setup 🔗 Proof The doorbell is managed through a user-created TP-Link account rather than a published universal default password. Users can change the account password and are advised to use a strong, unique password.
Category Score Score: 2 / 3

Technical Specifications

Property Details
Operating System & App Proprietary Tapo firmware (Companion App: Tapo app (Android/iOS))
Hardware (CPU / GPU) CPU: • GPU:
Memory & Storage Memory: • Storage: microSD card up to 512 GB; Tapo Care cloud storage; compatible Tapo Hub storage
Power, Battery & Charging Battery: 10000 mAh built-in rechargeable lithium-ion battery • Power: Battery or hardwired: 8–24 V AC, 10–40 VA; or 9–24 V DC, at least 10 W • Charging: 5 V DC, 2 A USB input; approximately 7–8 hours; hardwired charging; no solar charging
Display & Camera Display: • Camera: 1/2.7-inch CMOS; 2K 5MP, 2560 x 1920; 15/20 fps; 180° diagonal field of view
Sound & Connectivity Sound: Built-in microphone and speaker; two-way audio; included indoor chime • Connectivity: y 2.4 GHz Wi-Fi 802.11 b/g/n; HTTPS; RTSP in Always-On mode; Alexa and Google Assistant
Physical (Dimensions & Mass) Dimensions: Doorbell: 150 x 50 x 38.4 mm • Mass: Doorbell: 297 g


Retrieved from "http://fehmijaafar.net/wiki-iot/index.php?title=TP-Link_Tapo_D235_(V1)&oldid=9748"