Wiki-IoT - Recent changes [en]

Aqara Ark M3 Smart Home Gateway

Jeandecian — Tue, 27 Oct 2026 12:05:39 GMT

TP-Link Archer C50 V3 (Archer C50 V3)

Jeandecian — Tue, 27 Oct 2026 01:11:59 GMT

Jeandecian set 9258 as the approved revision for "TP-Link Archer C50 V3 (Archer C50 V3)"

TP-Link Archer AX10 (Archer AX10)

Jeandecian — Tue, 27 Oct 2026 01:01:42 GMT

Jeandecian set 9262 as the approved revision for "TP-Link Archer AX10 (Archer AX10)"

Syska Smart LED Bulb Rainbow

Jeandecian — Tue, 27 Oct 2026 01:00:37 GMT

Synology RT6600ax

Jeandecian — Tue, 27 Oct 2026 00:58:40 GMT

SwitchBot Smart Lock Keypad (W2401000)

Jeandecian — Tue, 27 Oct 2026 00:57:22 GMT

Seeed Studio SenseCAP S2103

Jeandecian — Tue, 27 Oct 2026 00:55:15 GMT

Schlage Encode Plus Smart WiFi Deadbolt (BE499WBCENFFF)

Jeandecian — Tue, 27 Oct 2026 00:54:48 GMT

LG Video Doorbell Wired

Jeandecian — Tue, 27 Oct 2026 00:08:52 GMT

LG Velvet (LM-G900)

Jeandecian — Tue, 27 Oct 2026 00:08:04 GMT

LG Smart Deadbolt Lock

Jeandecian — Tue, 27 Oct 2026 00:07:18 GMT

LG OLED C2 (OLED C2)

Jeandecian — Tue, 27 Oct 2026 00:06:16 GMT

LG G8 ThinQ (LM-G820)

Jeandecian — Mon, 26 Oct 2026 23:53:41 GMT

Konke Mini K Smart Plug

Jeandecian — Mon, 26 Oct 2026 23:53:08 GMT

JAIOTlink C492A-W6 Wi-Fi IP Camera (C492A-W6)

Jeandecian — Mon, 26 Oct 2026 23:52:31 GMT

Insteon Hub 2245-222 (Firmware 1012)

Jeandecian — Mon, 26 Oct 2026 23:51:41 GMT

Imou Bullet 2C (Bullet 2C)

Jeandecian — Mon, 26 Oct 2026 23:51:21 GMT

IRobot Roomba j9+ (J955020)

Jeandecian — Mon, 26 Oct 2026 23:50:52 GMT

Home Assistant Green (NC-GREEN-1175)

Jeandecian — Mon, 26 Oct 2026 23:50:12 GMT

HONOR Magic V3

Jeandecian — Mon, 26 Oct 2026 23:43:02 GMT

Fortinet FortiGate Rugged 60F (FGR-60F)

Jeandecian — Mon, 26 Oct 2026 23:41:37 GMT

Flient Smart Door Lock v1.0

Jeandecian — Mon, 26 Oct 2026 23:41:16 GMT

Firewalla Purple

Jeandecian — Mon, 26 Oct 2026 23:40:51 GMT

Amazon Echo Dot (4th Gen)

Jeandecian — Mon, 26 Oct 2026 23:23:56 GMT

Amazfit GTS 4

Jeandecian — Mon, 26 Oct 2026 23:23:29 GMT

AXIS Panoramic Camera P4707-PLVE

Jeandecian — Mon, 26 Oct 2026 23:18:49 GMT

AXIS Panoramic Camera P4705-PLVE

Jeandecian — Mon, 26 Oct 2026 23:14:31 GMT

AXIS Panoramic Camera P3738-PLE

Jeandecian — Mon, 26 Oct 2026 23:13:32 GMT

AXIS Panoramic Camera P3737-PLE

Jeandecian — Mon, 26 Oct 2026 23:13:04 GMT

AXIS Q3536-LVE

Jeandecian — Mon, 26 Oct 2026 23:11:07 GMT

AXIS Thermal Camera Q1972-E (Q1972-E)

Jeandecian — Mon, 26 Oct 2026 23:10:30 GMT

AXIS Radar-Video Fusion Camera (Q1656-DLE)

Jeandecian — Mon, 26 Oct 2026 23:09:00 GMT

AXIS PTZ Network Camera V5925 (V5925)

Jeandecian — Mon, 26 Oct 2026 22:26:34 GMT

AXIS PTZ Network Camera Q6318-LE (Q6318-LE)

Jeandecian — Mon, 26 Oct 2026 22:25:52 GMT

AXIS PTZ Network Camera Q6315-LE (Q6315-LE)

Jeandecian — Mon, 26 Oct 2026 22:24:59 GMT

AXIS PTZ Network Camera Q6135-LE (Q6135-LE)

Jeandecian — Mon, 26 Oct 2026 22:24:17 GMT

AXIS PTZ Network Camera Q6078-E (Q6078-E)

Jeandecian — Mon, 26 Oct 2026 22:23:45 GMT

AXIS PTZ Network Camera Q6075-E (Q6075-E)

Jeandecian — Mon, 26 Oct 2026 22:23:20 GMT

AXIS PTZ Network Camera P5676-LE (P5676-LE)

Jeandecian — Mon, 26 Oct 2026 22:22:55 GMT

AXIS PTZ Network Camera P5655-E (P5655-E)

Jeandecian — Mon, 26 Oct 2026 22:21:27 GMT

AXIS PTZ Network Camera M5526-E (M5526-E)

Jeandecian — Mon, 26 Oct 2026 22:21:01 GMT

AXIS PTZ Network Camera M5525-E (M5525-E)

Jeandecian — Mon, 26 Oct 2026 22:20:41 GMT

AXIS Network Intercom I7020

Jeandecian — Mon, 26 Oct 2026 22:20:12 GMT

AXIS Dome Camera M3098-LV

Jeandecian — Mon, 26 Oct 2026 22:18:37 GMT

AXIS Dome Camera (M3085-V)

Jeandecian — Mon, 26 Oct 2026 22:18:03 GMT

Jeandecian set 8715 as the approved revision for "AXIS Dome Camera (M3085-V)"

AXIS V5925 PTZ Network Camera (V5925)

Jeandecian — Mon, 26 Oct 2026 22:07:48 GMT

Jeandecian moved page AXIS V5925 PTZ Network Camera (V5925) to AXIS PTZ Network Camera V5925 (V5925) without leaving a redirect

New page

{{Classification
|name=AXIS V5925 PTZ Network Camera
|brand=AXIS
|website=https://www.axis.com/products/axis-v5925
|release_date=2021-02-09
|model=V5925
|type=Network camera
|operating_system=AXIS OS 12.11.118 LTS 2026
|cpu=ARTPEC-7
|storage=Internal flash and removable SD card
|power=Power over Ethernet (PoE)
|connectivity=Ethernet; HTTPS/TLS; IEEE 802.1X
|device_known_hardware_tampering=None
|device_known_hardware_tampering_proof=https://www.axis.com/dam/public/55/00/dd/datasheet-axis-v5925-ptz-camera-en-US-555517.pdf
|device_known_hardware_tampering_comment=No exact-model hardware-tampering report established in reviewed sources; this is not proof of absence.
|device_known_vulnerabilties=Rare
|device_known_vulnerabilties_proof=https://www.axis.com/dam/public/f1/f0/1e/cve-2025-9524pdf-en-US-504220.pdf
https://nvd.nist.gov/vuln/detail/CVE-2025-9524
|device_known_vulnerabilties_comment=Axis advisory and NVD document CVE-2025-9524 affecting AXIS OS; vendor patches are available. Rated Rare under the form taxonomy.
|device_prior_attacks=None
|device_prior_attacks_proof=https://www.axis.com/dam/public/f1/f0/1e/cve-2025-9524pdf-en-US-504220.pdf
|device_prior_attacks_comment=No exact-model prior attack campaign established in the reviewed sources; this is time-bounded and not proof of absence.
|device_updatability=Very common
|device_updatability_proof=https://www.axis.com/products/axis-v5925/support
|device_updatability_comment=Vendor provides downloadable firmware and model-specific support.
|system_authentication_with_other_systems=Partial
|system_authentication_with_other_systems_proof=https://www.axis.com/dam/public/55/00/dd/datasheet-axis-v5925-ptz-camera-en-US-555517.pdf
|system_authentication_with_other_systems_comment=Datasheet documents IEEE 802.1X/EAP-TLS and certificate support; rated Partial because coverage depends on deployment.
|system_communications=Encrypted with up-to-date encryption
|system_communications_proof=https://www.axis.com/dam/public/55/00/dd/datasheet-axis-v5925-ptz-camera-en-US-555517.pdf
https://help.axis.com/en-us/axis-os-hardening-guide
|system_communications_comment=HTTPS/TLS and current hardening guidance support encrypted communications.
|system_storage=No encryption
|system_storage_proof=https://www.axis.com/dam/public/55/00/dd/datasheet-axis-v5925-ptz-camera-en-US-555517.pdf
|system_storage_comment=Reviewed datasheet does not establish encryption at rest for internal/removable storage; scored No encryption under the mandatory choices.
|user_authentication_account_management=Full
|user_authentication_account_management_proof=https://help.axis.com/en-us/axis-v5925
|user_authentication_account_management_comment=Administrator/user account management is documented in the product manual.
|user_authentication_authentication=Basic
|user_authentication_authentication_proof=https://help.axis.com/en-us/axis-v5925
https://www.axis.com/dam/public/55/00/dd/datasheet-axis-v5925-ptz-camera-en-US-555517.pdf
|user_authentication_authentication_comment=Password-based authentication and certificate-based mechanisms are documented; scored Basic for user login.
|user_authentication_brute_force_protection=Exist
|user_authentication_brute_force_protection_proof=https://help.axis.com/en-us/axis-os-hardening-guide
|user_authentication_brute_force_protection_comment=Axis hardening guidance documents login-failure delay and protections against repeated attempts.
|user_authentication_event_logging=Access event logged
|user_authentication_event_logging_proof=https://www.axis.com/dam/public/55/00/dd/datasheet-axis-v5925-ptz-camera-en-US-555517.pdf
|user_authentication_event_logging_comment=Datasheet documents event logging and audit/security event capabilities.
|user_authentication_passwords=Require change after setup
|user_authentication_passwords_proof=https://help.axis.com/en-us/axis-v5925
|user_authentication_passwords_comment=Initial setup requires setting the root password; reviewed documentation did not establish a mandatory complexity policy.
}}
Evidence baseline reviewed 2026-10-25. Release date is the earliest dated public vendor datasheet/manual located, used as a documented proxy where an explicit launch date was unavailable. Mandatory-form convention: “None” for hardware tampering and prior attacks means no exact-model evidence established in reviewed public sources, not proof of absence. Known vulnerability scoring uses the vendor advisory and NVD; patched status does not mean vulnerability-free. CATS: Device 2, System 2, User Authentication 2; GRAS 6; final grade B.

AXIS Q6318-LE PTZ Camera (Q6318-LE)

Jeandecian — Mon, 26 Oct 2026 22:07:03 GMT

Jeandecian moved page AXIS Q6318-LE PTZ Camera (Q6318-LE) to AXIS PTZ Network Camera Q6318-LE (Q6318-LE) without leaving a redirect

New page

{{Classification
|name=AXIS Q6318-LE PTZ Camera
|brand=AXIS
|website=https://www.axis.com/products/axis-q6318-le
|release_date=2023-01-20
|model=Q6318-LE
|type=Network camera
|operating_system=AXIS OS 12.11.118 LTS 2026
|cpu=ARTPEC-7
|storage=Internal flash and removable SD card
|power=Power over Ethernet (PoE)
|connectivity=Ethernet; HTTPS/TLS; IEEE 802.1X
|device_known_hardware_tampering=None
|device_known_hardware_tampering_proof=https://www.axis.com/dam/public/4e/c4/e0/datasheet-axis-q6318-le-ptz-camera-en-US-555500.pdf
|device_known_hardware_tampering_comment=No exact-model hardware-tampering report established in reviewed sources; this is not proof of absence.
|device_known_vulnerabilties=Rare
|device_known_vulnerabilties_proof=https://www.axis.com/dam/public/f1/f0/1e/cve-2025-9524pdf-en-US-504220.pdf
https://nvd.nist.gov/vuln/detail/CVE-2025-9524
|device_known_vulnerabilties_comment=Axis advisory and NVD document CVE-2025-9524 affecting AXIS OS; vendor patches are available. Rated Rare under the form taxonomy.
|device_prior_attacks=None
|device_prior_attacks_proof=https://www.axis.com/dam/public/f1/f0/1e/cve-2025-9524pdf-en-US-504220.pdf
|device_prior_attacks_comment=No exact-model prior attack campaign established in the reviewed sources; this is time-bounded and not proof of absence.
|device_updatability=Very common
|device_updatability_proof=https://www.axis.com/products/axis-q6318-le/support
|device_updatability_comment=Vendor provides downloadable firmware and model-specific support.
|system_authentication_with_other_systems=Partial
|system_authentication_with_other_systems_proof=https://www.axis.com/dam/public/4e/c4/e0/datasheet-axis-q6318-le-ptz-camera-en-US-555500.pdf
|system_authentication_with_other_systems_comment=Datasheet documents IEEE 802.1X/EAP-TLS and certificate support; rated Partial because coverage depends on deployment.
|system_communications=Encrypted with up-to-date encryption
|system_communications_proof=https://www.axis.com/dam/public/4e/c4/e0/datasheet-axis-q6318-le-ptz-camera-en-US-555500.pdf
https://help.axis.com/en-us/axis-os-hardening-guide
|system_communications_comment=HTTPS/TLS and current hardening guidance support encrypted communications.
|system_storage=No encryption
|system_storage_proof=https://www.axis.com/dam/public/4e/c4/e0/datasheet-axis-q6318-le-ptz-camera-en-US-555500.pdf
|system_storage_comment=Reviewed datasheet does not establish encryption at rest for internal/removable storage; scored No encryption under the mandatory choices.
|user_authentication_account_management=Full
|user_authentication_account_management_proof=https://help.axis.com/en-us/axis-q6318-le
|user_authentication_account_management_comment=Administrator/user account management is documented in the product manual.
|user_authentication_authentication=Basic
|user_authentication_authentication_proof=https://help.axis.com/en-us/axis-q6318-le
https://www.axis.com/dam/public/4e/c4/e0/datasheet-axis-q6318-le-ptz-camera-en-US-555500.pdf
|user_authentication_authentication_comment=Password-based authentication and certificate-based mechanisms are documented; scored Basic for user login.
|user_authentication_brute_force_protection=Exist
|user_authentication_brute_force_protection_proof=https://help.axis.com/en-us/axis-os-hardening-guide
|user_authentication_brute_force_protection_comment=Axis hardening guidance documents login-failure delay and protections against repeated attempts.
|user_authentication_event_logging=Access event logged
|user_authentication_event_logging_proof=https://www.axis.com/dam/public/4e/c4/e0/datasheet-axis-q6318-le-ptz-camera-en-US-555500.pdf
|user_authentication_event_logging_comment=Datasheet documents event logging and audit/security event capabilities.
|user_authentication_passwords=Require change after setup
|user_authentication_passwords_proof=https://help.axis.com/en-us/axis-q6318-le
|user_authentication_passwords_comment=Initial setup requires setting the root password; reviewed documentation did not establish a mandatory complexity policy.
}}
Evidence baseline reviewed 2026-10-25. Release date is the earliest dated public vendor datasheet/manual located, used as a documented proxy where an explicit launch date was unavailable. Mandatory-form convention: “None” for hardware tampering and prior attacks means no exact-model evidence established in reviewed public sources, not proof of absence. Known vulnerability scoring uses the vendor advisory and NVD; patched status does not mean vulnerability-free. CATS: Device 2, System 2, User Authentication 2; GRAS 6; final grade B.

AXIS Q6315-LE PTZ Network Camera (Q6315-LE)

Jeandecian — Mon, 26 Oct 2026 22:06:35 GMT

Jeandecian moved page AXIS Q6315-LE PTZ Network Camera (Q6315-LE) to AXIS PTZ Network Camera Q6315-LE (Q6315-LE) without leaving a redirect

New page

{{Classification
|name=AXIS Q6315-LE PTZ Network Camera
|brand=AXIS
|website=https://www.axis.com/products/axis-q6315-le
|release_date=2021-04-24
|model=Q6315-LE
|type=Network camera
|operating_system=AXIS OS 12.11.118 LTS 2026
|cpu=ARTPEC-7
|storage=Internal flash and removable SD card
|power=Power over Ethernet (PoE)
|connectivity=Ethernet; HTTPS/TLS; IEEE 802.1X
|device_known_hardware_tampering=None
|device_known_hardware_tampering_proof=https://www.axis.com/dam/public/d3/01/d8/datasheet-axis-q6315-le-ptz-network-camera-en-US-555520.pdf
|device_known_hardware_tampering_comment=No exact-model hardware-tampering report established in reviewed sources; this is not proof of absence.
|device_known_vulnerabilties=Rare
|device_known_vulnerabilties_proof=https://www.axis.com/dam/public/f1/f0/1e/cve-2025-9524pdf-en-US-504220.pdf
https://nvd.nist.gov/vuln/detail/CVE-2025-9524
|device_known_vulnerabilties_comment=Axis advisory and NVD document CVE-2025-9524 affecting AXIS OS; vendor patches are available. Rated Rare under the form taxonomy.
|device_prior_attacks=None
|device_prior_attacks_proof=https://www.axis.com/dam/public/f1/f0/1e/cve-2025-9524pdf-en-US-504220.pdf
|device_prior_attacks_comment=No exact-model prior attack campaign established in the reviewed sources; this is time-bounded and not proof of absence.
|device_updatability=Very common
|device_updatability_proof=https://www.axis.com/products/axis-q6315-le/support
|device_updatability_comment=Vendor provides downloadable firmware and model-specific support.
|system_authentication_with_other_systems=Partial
|system_authentication_with_other_systems_proof=https://www.axis.com/dam/public/d3/01/d8/datasheet-axis-q6315-le-ptz-network-camera-en-US-555520.pdf
|system_authentication_with_other_systems_comment=Datasheet documents IEEE 802.1X/EAP-TLS and certificate support; rated Partial because coverage depends on deployment.
|system_communications=Encrypted with up-to-date encryption
|system_communications_proof=https://www.axis.com/dam/public/d3/01/d8/datasheet-axis-q6315-le-ptz-network-camera-en-US-555520.pdf
https://help.axis.com/en-us/axis-os-hardening-guide
|system_communications_comment=HTTPS/TLS and current hardening guidance support encrypted communications.
|system_storage=No encryption
|system_storage_proof=https://www.axis.com/dam/public/d3/01/d8/datasheet-axis-q6315-le-ptz-network-camera-en-US-555520.pdf
|system_storage_comment=Reviewed datasheet does not establish encryption at rest for internal/removable storage; scored No encryption under the mandatory choices.
|user_authentication_account_management=Full
|user_authentication_account_management_proof=https://help.axis.com/en-us/axis-q6315-le
|user_authentication_account_management_comment=Administrator/user account management is documented in the product manual.
|user_authentication_authentication=Basic
|user_authentication_authentication_proof=https://help.axis.com/en-us/axis-q6315-le
https://www.axis.com/dam/public/d3/01/d8/datasheet-axis-q6315-le-ptz-network-camera-en-US-555520.pdf
|user_authentication_authentication_comment=Password-based authentication and certificate-based mechanisms are documented; scored Basic for user login.
|user_authentication_brute_force_protection=Exist
|user_authentication_brute_force_protection_proof=https://help.axis.com/en-us/axis-os-hardening-guide
|user_authentication_brute_force_protection_comment=Axis hardening guidance documents login-failure delay and protections against repeated attempts.
|user_authentication_event_logging=Access event logged
|user_authentication_event_logging_proof=https://www.axis.com/dam/public/d3/01/d8/datasheet-axis-q6315-le-ptz-network-camera-en-US-555520.pdf
|user_authentication_event_logging_comment=Datasheet documents event logging and audit/security event capabilities.
|user_authentication_passwords=Require change after setup
|user_authentication_passwords_proof=https://help.axis.com/en-us/axis-q6315-le
|user_authentication_passwords_comment=Initial setup requires setting the root password; reviewed documentation did not establish a mandatory complexity policy.
}}
Evidence baseline reviewed 2026-10-25. Release date is the earliest dated public vendor datasheet/manual located, used as a documented proxy where an explicit launch date was unavailable. Mandatory-form convention: “None” for hardware tampering and prior attacks means no exact-model evidence established in reviewed public sources, not proof of absence. Known vulnerability scoring uses the vendor advisory and NVD; patched status does not mean vulnerability-free. CATS: Device 2, System 2, User Authentication 2; GRAS 6; final grade B.

AXIS Q6135-LE PTZ Network Camera (Q6135-LE)

Jeandecian — Mon, 26 Oct 2026 22:00:41 GMT

Jeandecian moved page AXIS Q6135-LE PTZ Network Camera (Q6135-LE) to AXIS PTZ Network Camera Q6135-LE (Q6135-LE) without leaving a redirect

New page

{{Classification
|name=AXIS Q6135-LE PTZ Network Camera
|brand=AXIS
|website=https://www.axis.com/products/axis-q6135-le
|release_date=2021-01-23
|model=Q6135-LE
|type=Network camera
|operating_system=AXIS OS 12.11.118 LTS 2026
|cpu=ARTPEC-7
|storage=Internal flash and removable SD card
|power=Power over Ethernet (PoE)
|connectivity=Ethernet; HTTPS/TLS; IEEE 802.1X
|device_known_hardware_tampering=None
|device_known_hardware_tampering_proof=https://www.axis.com/dam/public/d2/3a/f8/datasheet-axis-q6135-le-ptz-network-camera-en-US-555528.pdf
|device_known_hardware_tampering_comment=No exact-model hardware-tampering report established in reviewed sources; this is not proof of absence.
|device_known_vulnerabilties=Rare
|device_known_vulnerabilties_proof=https://www.axis.com/dam/public/f1/f0/1e/cve-2025-9524pdf-en-US-504220.pdf
https://nvd.nist.gov/vuln/detail/CVE-2025-9524
|device_known_vulnerabilties_comment=Axis advisory and NVD document CVE-2025-9524 affecting AXIS OS; vendor patches are available. Rated Rare under the form taxonomy.
|device_prior_attacks=None
|device_prior_attacks_proof=https://www.axis.com/dam/public/f1/f0/1e/cve-2025-9524pdf-en-US-504220.pdf
|device_prior_attacks_comment=No exact-model prior attack campaign established in the reviewed sources; this is time-bounded and not proof of absence.
|device_updatability=Very common
|device_updatability_proof=https://www.axis.com/products/axis-q6135-le/support
|device_updatability_comment=Vendor provides downloadable firmware and model-specific support.
|system_authentication_with_other_systems=Partial
|system_authentication_with_other_systems_proof=https://www.axis.com/dam/public/d2/3a/f8/datasheet-axis-q6135-le-ptz-network-camera-en-US-555528.pdf
|system_authentication_with_other_systems_comment=Datasheet documents IEEE 802.1X/EAP-TLS and certificate support; rated Partial because coverage depends on deployment.
|system_communications=Encrypted with up-to-date encryption
|system_communications_proof=https://www.axis.com/dam/public/d2/3a/f8/datasheet-axis-q6135-le-ptz-network-camera-en-US-555528.pdf
https://help.axis.com/en-us/axis-os-hardening-guide
|system_communications_comment=HTTPS/TLS and current hardening guidance support encrypted communications.
|system_storage=No encryption
|system_storage_proof=https://www.axis.com/dam/public/d2/3a/f8/datasheet-axis-q6135-le-ptz-network-camera-en-US-555528.pdf
|system_storage_comment=Reviewed datasheet does not establish encryption at rest for internal/removable storage; scored No encryption under the mandatory choices.
|user_authentication_account_management=Full
|user_authentication_account_management_proof=https://help.axis.com/en-us/axis-q6135-le
|user_authentication_account_management_comment=Administrator/user account management is documented in the product manual.
|user_authentication_authentication=Basic
|user_authentication_authentication_proof=https://help.axis.com/en-us/axis-q6135-le
https://www.axis.com/dam/public/d2/3a/f8/datasheet-axis-q6135-le-ptz-network-camera-en-US-555528.pdf
|user_authentication_authentication_comment=Password-based authentication and certificate-based mechanisms are documented; scored Basic for user login.
|user_authentication_brute_force_protection=Exist
|user_authentication_brute_force_protection_proof=https://help.axis.com/en-us/axis-os-hardening-guide
|user_authentication_brute_force_protection_comment=Axis hardening guidance documents login-failure delay and protections against repeated attempts.
|user_authentication_event_logging=Access event logged
|user_authentication_event_logging_proof=https://www.axis.com/dam/public/d2/3a/f8/datasheet-axis-q6135-le-ptz-network-camera-en-US-555528.pdf
|user_authentication_event_logging_comment=Datasheet documents event logging and audit/security event capabilities.
|user_authentication_passwords=Require change after setup
|user_authentication_passwords_proof=https://help.axis.com/en-us/axis-q6135-le
|user_authentication_passwords_comment=Initial setup requires setting the root password; reviewed documentation did not establish a mandatory complexity policy.
}}
Evidence baseline reviewed 2026-10-25. Release date is the earliest dated public vendor datasheet/manual located, used as a documented proxy where an explicit launch date was unavailable. Mandatory-form convention: “None” for hardware tampering and prior attacks means no exact-model evidence established in reviewed public sources, not proof that none exists. Known vulnerability scoring uses the vendor advisory and NVD; patched status does not mean vulnerability-free. CATS: Device 2, System 2, User Authentication 2; GRAS 6; final grade B.

AXIS Q6078-E PTZ Camera (Q6078-E)

Jeandecian — Mon, 26 Oct 2026 22:00:21 GMT

Jeandecian moved page AXIS Q6078-E PTZ Camera (Q6078-E) to AXIS PTZ Network Camera Q6078-E (Q6078-E) without leaving a redirect

New page

{{Classification
|name=AXIS Q6078-E PTZ Camera
|brand=AXIS
|website=https://www.axis.com/products/axis-q6078-e
|release_date=2021-07-21
|model=Q6078-E
|type=Network camera
|operating_system=AXIS OS 12.11.118 LTS 2026
|cpu=ARTPEC-7
|storage=Internal flash and removable SD card
|power=Power over Ethernet (PoE)
|connectivity=Ethernet; HTTPS/TLS; IEEE 802.1X
|device_known_hardware_tampering=None
|device_known_hardware_tampering_proof=https://www.axis.com/dam/public/e1/f6/c8/datasheet-axis-q6078-e-ptz-camera-en-US-555514.pdf
|device_known_hardware_tampering_comment=No exact-model hardware-tampering report established in reviewed sources; this is not proof of absence.
|device_known_vulnerabilties=Rare
|device_known_vulnerabilties_proof=https://www.axis.com/dam/public/f1/f0/1e/cve-2025-9524pdf-en-US-504220.pdf
https://nvd.nist.gov/vuln/detail/CVE-2025-9524
|device_known_vulnerabilties_comment=Axis advisory and NVD document CVE-2025-9524 affecting AXIS OS; vendor patches are available. Rated Rare under the form taxonomy.
|device_prior_attacks=None
|device_prior_attacks_proof=https://www.axis.com/dam/public/f1/f0/1e/cve-2025-9524pdf-en-US-504220.pdf
|device_prior_attacks_comment=No exact-model prior attack campaign established in the reviewed sources; this is time-bounded and not proof of absence.
|device_updatability=Very common
|device_updatability_proof=https://www.axis.com/products/axis-q6078-e/support
|device_updatability_comment=Vendor provides downloadable firmware and model-specific support.
|system_authentication_with_other_systems=Partial
|system_authentication_with_other_systems_proof=https://www.axis.com/dam/public/e1/f6/c8/datasheet-axis-q6078-e-ptz-camera-en-US-555514.pdf
|system_authentication_with_other_systems_comment=Datasheet documents IEEE 802.1X/EAP-TLS and certificate support; rated Partial because coverage depends on deployment.
|system_communications=Encrypted with up-to-date encryption
|system_communications_proof=https://www.axis.com/dam/public/e1/f6/c8/datasheet-axis-q6078-e-ptz-camera-en-US-555514.pdf
https://help.axis.com/en-us/axis-os-hardening-guide
|system_communications_comment=HTTPS/TLS and current hardening guidance support encrypted communications.
|system_storage=No encryption
|system_storage_proof=https://www.axis.com/dam/public/e1/f6/c8/datasheet-axis-q6078-e-ptz-camera-en-US-555514.pdf
|system_storage_comment=Reviewed datasheet does not establish encryption at rest for internal/removable storage; scored No encryption under the mandatory choices.
|user_authentication_account_management=Full
|user_authentication_account_management_proof=https://help.axis.com/en-us/axis-q6078-e
|user_authentication_account_management_comment=Administrator/user account management is documented in the product manual.
|user_authentication_authentication=Basic
|user_authentication_authentication_proof=https://help.axis.com/en-us/axis-q6078-e
https://www.axis.com/dam/public/e1/f6/c8/datasheet-axis-q6078-e-ptz-camera-en-US-555514.pdf
|user_authentication_authentication_comment=Password-based authentication and certificate-based mechanisms are documented; scored Basic for user login.
|user_authentication_brute_force_protection=Exist
|user_authentication_brute_force_protection_proof=https://help.axis.com/en-us/axis-os-hardening-guide
|user_authentication_brute_force_protection_comment=Axis hardening guidance documents login-failure delay and protections against repeated attempts.
|user_authentication_event_logging=Access event logged
|user_authentication_event_logging_proof=https://www.axis.com/dam/public/e1/f6/c8/datasheet-axis-q6078-e-ptz-camera-en-US-555514.pdf
|user_authentication_event_logging_comment=Datasheet documents event logging and audit/security event capabilities.
|user_authentication_passwords=Require change after setup
|user_authentication_passwords_proof=https://help.axis.com/en-us/axis-q6078-e
|user_authentication_passwords_comment=Initial setup requires setting the root password; reviewed documentation did not establish a mandatory complexity policy.
}}
Evidence baseline reviewed 2026-10-25. Release date is the earliest dated public vendor datasheet/manual located, used as a documented proxy where an explicit launch date was unavailable. Mandatory-form convention: “None” for hardware tampering and prior attacks means no exact-model evidence established in reviewed public sources, not proof of absence. Known vulnerability scoring uses the vendor advisory and NVD; patched status does not mean vulnerability-free. CATS: Device 2, System 2, User Authentication 2; GRAS 6; final grade B.

@@ Line 60: / Line 60: @@
 |user_authentication_passwords_proof=https://www.aqara.com/en/support.html
 |user_authentication_passwords_comment=No default admin credential; user sets account password during registration
 }}
 Aqara Ark M3 gateway, multi-protocol smart home hub supporting Matter, Zigbee and Thread, local automation and remote secure access.

@@ Line 20: / Line 20: @@
 |user_authentication_event_logging=Absent
 |user_authentication_passwords=Default/Common/Easy to guess
 }}

@@ Line 60: / Line 60: @@
 |user_authentication_passwords_proof=https://global.download.synology.com/download/Document/Software/UserGuide/Os/SRM/1.3/enu/Syno_UsersGuide_Router_1.3_enu.pdf https://kb.synology.com/en-sg/SRM/help/SRM/ControlPanel/user?version=1_3
 |user_authentication_passwords_comment=The setup wizard requires creation of an administrator account. The second option is used for mandatory initial credential creation; optional configurable password-strength rules are documented, but mandatory complexity at first setup is not established.
 }}
 RESEARCH DRAFT - ALL RATING CONTROLS COMPLETED; SOURCE LIMITATIONS REQUIRE REVIEW. Hardware tampering (Rare) and internal-flash storage (No encryption) follow the contributor-supplied assessment. These two selections are not independently verified manufacturer findings; the supplied 4 GB eMMC capacity and unencrypted internal-partition claim still require a direct technical source. No encryption refers only to internal flash, not to optional encrypted external shared folders. Other ratings are qualitative assessments with scope limitations in each comment, not measurements of attack frequency or observations from a tested unit. Communications assumes WPA3 and HTTPS are configured. Historical SRM vulnerabilities and the 2023 router-team attack notice do not establish compromise of every RT6600ax or vulnerability of current patched firmware. Initial administrator credential creation is mapped to the closest password option; compulsory first-setup complexity is not established. Unspecified hardware details remain marked as such. Release date source: https://www.synology.com/en-au/company/news/article/RT6600ax . General and hardware specifications: https://www.synology.com/en-us/products/RT6600ax . No physical-device testing was performed.

@@ Line 60: / Line 60: @@
 |user_authentication_passwords_proof=https://www.switch-bot.com/pages/switchbot-keypad
 |user_authentication_passwords_comment=Complex password rules enforced after initial setup.
 }}
 IDRS Grade: C. CVE-2026-8374 access control weakness. High impact because it controls physical door entry, but attack complexity is moderate.

@@ Line 18: / Line 18: @@
 |user_authentication_passwords=Default/Common/Easy to guess
 |user_authentication_passwords_proof=https://sensecap.org/product/sensecap-s2103-lorawan-co2-temperature-and-humidity-sensor-for-outdoorindoor-air-quality-co2-meter-carbon-emission/?utm_source=chatgpt.com
 }}

@@ Line 50: / Line 50: @@
 |user_authentication_passwords_proof=https://www.schlage.com/en/home/products/BE499WBCENFFF.html
 |user_authentication_passwords_comment=Uses a unique programming code and user-set access codes; default/common passwords are not documented.
-|latest_classification_date=2026-10-23
+|latest_classification_date=2026-10-26
 |grade_calculator_version=1
 }}
 Prepared from public product documentation, vendor security information, and NVD records. The release date is approximate where the vendor did not state a day. No device was physically tested, scanned, or attacked. Each score links to the public evidence used for the assessment.

@@ Line 36: / Line 36: @@
 |user_authentication_event_logging=Access event logged
 |user_authentication_passwords=Require change after setup
 }}

@@ Line 59: / Line 59: @@
 |user_authentication_passwords_proof=https://jp.sharp/products/aquos-r8/d/，https://kakaku.com/keitai/smartphone/model/M0000001003/spec/，https://www.docomo.ne.jp/support/product_update/sh52d/20240318.html
 |user_authentication_passwords_comment=No default credentials; a lock-screen PIN/password is set during first-time setup. No complexity policy is enforced.
 }}
 LG's last flagship-era phone; Wacom stylus support with 4096 pressure levels, optional Dual Screen accessory, IP68 and MIL-STD-810G, 30 W wired / 10 W wireless charging.

@@ Line 40: / Line 40: @@
 |user_authentication_passwords=Require change after setup
 |user_authentication_passwords_proof=https://www.apple.com/shop/product/hsnb2zm/a/lg-smart-deadbolt-lock-essence-graphite
 }}
 Here is a paragraph for the **Free text** section:
 The LG Smart Deadbolt Lock (Apple Home Collection) is a newly released (October 2026) Matter-certified smart lock developed in collaboration with Apple. Its primary security strengths lie in its secure authentication mechanisms, particularly Ultra-Wideband (UWB) hands-free unlocking and NFC, alongside standard PIN and physical key options. Because it operates natively within the Apple Home ecosystem, user account management and access scheduling are handled securely via Apple's infrastructure. The device features tamper detection and activity logging, ensuring users are notified of physical interference or access events. However, because it is a very recent release, there are currently no public CVEs or documented attack vectors. Additionally, detailed technical documentation regarding its specific encryption implementations for local storage and the exact rate-limiting policies for PIN entry (brute-force protection) is not yet publicly available, requiring conservative assessments in these areas based on its Matter certification.

@@ Line 12: / Line 12: @@
 |connectivity=Wi-Fi, Ethernet, HDMI
 |device_known_hardware_tampering=Rare
 |device_known_vulnerabilties=Rare
 |device_prior_attacks=Rare
 |device_updatability=Very common
 |device_updatability_proof=https://www.lg.com/us/support/product/lg-OLED55C2PUA.AUS
 |device_updatability_comment=OLED C2 (2022): firmware support assessed from vendor advisories
 |system_authentication_with_other_systems_proof=https://www.lg.com/support
 |system_authentication_with_other_systems_comment=OLED C2: local management accounts only, no third-party federation
 |system_communications_proof=https://www.lg.com/support
 |system_communications_comment=OLED C2: HTTPS management with dated protocol versions and cipher suites
 |system_storage_proof=https://www.lg.com/support
 |system_storage_comment=OLED C2: configuration and firmware not encrypted at rest
 |user_authentication_account_management_proof=https://lgsecurity.lge.com/
 |user_authentication_account_management_comment=OLED C2: single administrator account, no role separation
 |user_authentication_authentication_proof=https://www.lg.com/support
 |user_authentication_authentication_comment=OLED C2: password-only login, no MFA
 |user_authentication_brute_force_protection_proof=https://lgsecurity.lge.com/
 |user_authentication_brute_force_protection_comment=OLED C2: no account lockout or rate limiting
 |user_authentication_event_logging_proof=https://www.lg.com/support
 |user_authentication_event_logging_comment=OLED C2: minimal local logs, no central audit export
 |user_authentication_passwords_proof=https://lgsecurity.lge.com/
 |user_authentication_passwords_comment=OLED C2: factory default credentials, change not enforced
-|device_known_vulnerabilties_proof=https://nvd.nist.gov/vuln/search/results?query=LG%20OLED%20C2&search_type=all
+|latest_classification_date=2026-10-26
 |grade_calculator_version=1
 }}
 LG OLED C2 is a smart tv in the Smart TV category. Evidence: NVD search / vendor manual. Assessment reflects default deployment; verify the installed firmware and manual before submission.

@@ Line 12: / Line 12: @@
 |connectivity=Ethernet/Wi-Fi, RTSP/ONVIF
 |device_known_hardware_tampering=Rare
 |device_known_vulnerabilties=Rare
 |device_prior_attacks=Rare
 |device_updatability=Very common
 |device_updatability_proof=https://www.imou.com/eu/product/specs/bullet2c
 |device_updatability_comment=Bullet 2C (2021): firmware support assessed from vendor advisories
 |system_authentication_with_other_systems_proof=https://www.imou.com/
 |system_authentication_with_other_systems_comment=Bullet 2C: local management accounts only, no third-party federation
 |system_communications_proof=https://www.imou.com/
 |system_communications_comment=Bullet 2C: HTTPS management with dated protocol versions and cipher suites
 |system_storage_proof=https://www.imou.com/
 |system_storage_comment=Bullet 2C: configuration and firmware not encrypted at rest
 |user_authentication_account_management_proof=https://www.imou.com/security-and-privacy
 |user_authentication_account_management_comment=Bullet 2C: single administrator account, no role separation
 |user_authentication_authentication_proof=https://www.imou.com/
 |user_authentication_authentication_comment=Bullet 2C: password-only login, no MFA
 |user_authentication_brute_force_protection_proof=https://www.imou.com/security-and-privacy
 |user_authentication_brute_force_protection_comment=Bullet 2C: no account lockout or rate limiting
 |user_authentication_event_logging_proof=https://www.imou.com/
 |user_authentication_event_logging_comment=Bullet 2C: minimal local logs, no central audit export
 |user_authentication_passwords_proof=https://www.imou.com/security-and-privacy
 |user_authentication_passwords_comment=Bullet 2C: factory default credentials, change not enforced
-|device_known_vulnerabilties_proof=https://nvd.nist.gov/vuln/search/results?query=Imou+Bullet+2C&search_type=all
+|latest_classification_date=2026-10-26
 |grade_calculator_version=1
 }}
 Imou Bullet 2C is a security camera in the Security Camera category. Evidence: NVD search / vendor manual. Assessment reflects default deployment; verify the installed firmware and manual before submission.

@@ Line 5: / Line 5: @@
 |website=https://www.irobot.com/en_US/roomba-j9plus-self-emptying-robot-vacuum/J955020.html
 |release_date=2022-09-01
 |model=J955020
 |type=Robot vacuum with self-emptying base
@@ Line 50: / Line 49: @@
 |user_authentication_passwords_proof=https://www.irobot.com/en_US/support.html
 |user_authentication_passwords_comment=Password change is supported and a minimum length applies, but complexity is not enforced and there is no rotation or expiry.
 }}

@@ Line 60: / Line 60: @@
 |user_authentication_passwords_proof=https://www.home-assistant.io/green/
 |user_authentication_passwords_comment=首设密码
 }}
 Desk research dated 2026-10-23; no physical tests or cybersecurity certification. Green runs official Home Assistant software. Standard local HTTP and ordinary account login are assessed; TLS, MFA and IP bans require appropriate configuration. The brute-force selection denotes available configurable protection, not a tested enabled setting. Historical exploit evidence concerns Green with the optional Music Assistant add-on, not an unconditional stock-device flaw. Date is the 2023-09-17 announcement/limited release. Incident labels describe published evidence rather than measured population rates; None means no qualifying incident identified in the stated search, not zero risk.

@@ Line 58: / Line 58: @@
 |user_authentication_passwords_proof=https://source.android.com/docs/work/policies/password-policies
 |user_authentication_passwords_comment=Complex passcode rules and forced password rotation can be enforced by MDM policy.
 }}
 HONOR Magic V3 supports fingerprint and facial authentication, password complexity, brute force protection, access event logging and full Honor account management on MagicOS. It uses modern encryption for storage and communications.

@@ Line 48: / Line 48: @@
 |user_authentication_passwords_proof=https://docs.fortinet.com/document/fortigate/7.6.6/fortios-release-notes/799879/password-policy-enforcement
 |user_authentication_passwords_comment=FortiOS 7.6.5+ enforces 12 characters plus upper/lowercase, digit and special character. Noncompliant passwords require change before login; this profile retains enforcement.
 }}
 Documentation-based assessment of the base FGR-60F, using a declared FortiOS 7.6.6 configuration profile: HTTPS/TLS administration, administrator MFA, operator-key private-data encryption, login lockout, access-event logging and the default-enforced password policy. No physical appliance, firmware image or network traffic was tested. These are documented configured capabilities, not guarantees about every factory-default or deployed unit. Storage scope is private configuration secrets; no whole-flash encryption or encryption of every log is claimed. Historical CVE and active-exploitation evidence applies to the cited older FortiOS versions, not automatically to build 7.6.6 or an individually observed FGR-60F. None/Rare/Very common are qualitative classifications, not measured incident rates. The software baseline is documented and model-compatible, not a claim that it is the latest recommended patch. Release date denotes the manufacturer's public launch on 2020-12-02, not a verified first retail-delivery day. Hardware metadata refers only to base FGR-60F, not FGR-60F-3G4G. Rugged environmental protection is not assumed to mean tamper resistance. SSL VPN is not claimed for the assessed 7.6.6 version. Optional fields without verified data, including current sales status, are left blank.

@@ Line 60: / Line 60: @@
 |user_authentication_passwords_proof=[https://help.firewalla.com/hc/en-us/articles/115004397274-How-to-access-Firewalla-using-SSH]
 |user_authentication_passwords_comment=Closest rubric option for the optional SSH login: official instructions require Reset Password before first SSH use; the password rotates on reboot/support access. App management itself uses pairing keys and has no conventional shared login password. This is not a claim of mandatory user-selected complexity.
 }}
 Desk research dated 2026-10-23; no physical testing or security certification. Original Purple in router mode, paired app management and LAN-only SSH. Public launch date is 2022-02-01; global/US end of sale was February/April 2026, with continued software support. Historical CVEs before 1.979 are separated from current 1.983 production context. Communications rating explicitly covers the supported legacy-compatible CBC path; newer GCM and HTTPS paths also exist, and no live session was inspected. At-rest rating is based on local unencrypted PEM-key storage in published source, not a physical flash examination. Incident categories reflect published evidence, not measured attack rates. None means no qualifying incident identified, not zero risk.

@@ Line 57: / Line 57: @@
 |user_authentication_passwords_proof=https://arstechnica.com/gadgets/2021/07/passwords-in-amazon-echo-dots-live-on-even-after-you-factory-reset-them/
 |user_authentication_passwords_comment=No default credential is shipped; users must bind an Amazon account with formal password complexity rules during initial setup.
-|latest_classification_date=2022-03-22
+|latest_classification_date=2026-10-26
 |grade_calculator_version=1
 }}
 Corrected hardware specifications, updated all security criteria ratings with valid reference links, and recalculated the final grade based on IDRS methodology.

@@ Line 42: / Line 42: @@
 |user_authentication_passwords=Require change after setup with complexity requirements
 |user_authentication_passwords_comment=User-created password required at Zepp account registration with basic complexity rules; no default password.
-|latest_classification_date=2025-10-05
+|latest_classification_date=2026-10-26
 |grade_calculator_version=1
 }}

@@ Line 76: / Line 76: @@
 https://fehmijaafar.net/wiki-iot/index.php/Methodology
 |user_authentication_passwords_comment=First access requires creating an administrator account with a personal password; there is no default account on current AXIS OS. The middle label is used for mandatory initial credential provisioning. The model manual does not impose complexity or periodic password-change requirements; recommendations are not treated as enforcement.
 }}
 Evidence checked 2026-10-24. Exact P4707-PLVE hardware with supported, fully updated AXIS OS 12.x. Configuration-dependent rows assess a documented deployable hardened profile: HTTPS and encrypted media, trusted-certificate validation, plaintext services disabled, EAP-TLS where deployed, Access Log plus remote syslog enabled. They do not assert all defaults meet this profile. Historical CVEs are explicitly version-limited. The date field uses a dated official product video, not a claimed first-sale date.

@@ Line 43: / Line 43: @@
 |user_authentication_passwords_proof=https://help.axis.com/en-us/axis-q3536-lve#secure-passwords
 |user_authentication_passwords_comment=Initial password creation required; complexity is not assumed enforced.
 }}
 == Assessment scope ==

@@ Line 2: / Line 2: @@
 |name=AXIS Q1656-DLE Radar-Video Fusion Camera
 |brand=AXIS
 |website=https://www.axis.com/products/axis-q1656-dle
 |release_date=2022-11-15
 |model=Q1656-DLE
 |type=Security camera
 |dimensions=404 x 159 x 234 mm
 |mass=5 kg
@@ Line 14: / Line 11: @@
 |companion_app=Browser device interface; AXIS Device Manager
 |cpu=ARTPEC-8 SoC; deep learning processing unit (DLPU)
 |memory=2048 MB RAM; 8194 MB (as stated in the datasheet) flash
 |storage=microSD/microSDHC/microSDXC; recording to NAS supported
 |power=PoE IEEE 802.3at Type 2 Class 4: typical 10 W, maximum 25.5 W; 10-28 V DC: typical 9.5 W, maximum 25.5 W
 |camera=1/1.8-inch CMOS; 2688 x 1512 (4 MP); 3.9-10 mm F1.5 lens; 25/30 fps with WDR, up to 50/60 fps without WDR; integrated radar and IR/white illumination
 |sound=Microphone/line input and line output
@@ Line 60: / Line 53: @@
 |user_authentication_passwords_proof=https://help.axis.com/en-us/axis-q1656-dle] [https://www.axis.com/dam/public/permalink/260043/axis-os-129-release-flyer-en-US_260043.pdf
 |user_authentication_passwords_comment=First-use administrator password is mandatory. Optional 12.9+ complexity enforcement is not assumed enabled.
 }}
 == Assessment scope ==
 Documentary assessment of Q1656-DLE, checked 2026-10-23; no physical camera was tested. The selected, vendor-listed firmware is AXIS OS 12.11.118 LTS 2026. The communication/authentication scores describe a deployment using trusted certificates, mutual EAP-TLS, encrypted management and media, no anonymous viewing, and disabled unused plaintext protocols. Login protection and access/audit recording must be enabled and checked. These are explicit assessment conditions, not observations of an installed device. Optional password-complexity enforcement is not credited. Firmware availability does not establish that every disclosed issue is fixed.

@@ Line 50: / Line 50: @@
 |user_authentication_passwords_proof=https://help.axis.com/en-us/axis-v5925
 |user_authentication_passwords_comment=Initial setup requires setting the root password; reviewed documentation did not establish a mandatory complexity policy.
 }}
 Evidence baseline reviewed 2026-10-25. Release date is the earliest dated public vendor datasheet/manual located, used as a documented proxy where an explicit launch date was unavailable. Mandatory-form convention: “None” for hardware tampering and prior attacks means no exact-model evidence established in reviewed public sources, not proof of absence. Known vulnerability scoring uses the vendor advisory and NVD; patched status does not mean vulnerability-free. CATS: Device 2, System 2, User Authentication 2; GRAS 6; final grade B.

@@ Line 60: / Line 60: @@
 |user_authentication_passwords_proof=https://help.axis.com/en-us/axis-os-hardening-guide
 |user_authentication_passwords_comment=Axis devices cannot be operated until an administrator password has been configured during initial setup. This prevents operation using a known factory-default administrator password. The documented policy requires password creation before normal device operation, although this is not identical to requiring a password change after setup. Mandatory password complexity enforcement has not been confirmed for this specific model.
 }}
 The AXIS M3098-LV Dome Camera is a professional 4K network surveillance camera developed by Axis Communications. It was officially announced on March 23, 2026, with commercial availability planned for the second quarter of 2026.