AI Thinker ESP32-CAM Module
From Wiki-IoT
| AI Thinker ESP32-CAM Module | ||
|---|---|---|
|
Security Grade
Calculator v1
|
ESP32-CAM AI-Thinker Development Board
Brand: AI-Thinker (generic) (Parent: Shenzhen AI-Thinker Technology Co., Ltd.) Category: DIY Wi-Fi camera / development board • Model / Gen: 1st ESP32-CAM (OV2640 camera included) Release Date: 2018-11-29 • Status: In sale Classification Date: 2025-10-11 • Official Website | |
Contents
Security Evaluation
1. Device Security
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Known hardware tampering | Very common | 🔗 Proof | All pins exposed, no case, schematic public |
| Known vulnerabilities | Very common | 🔗 Proof | CVE-2019-12588 (KRACK), CVE-2020-15048 (buffer overflow) |
| Prior attacks | Very common | 🔗 Proof | Thousands of open cameras indexed by Shodan; Mirai-ESP32 variant |
| Updatability | Rare | 🔗 Proof | User must re-flash; no automatic OTA; clones never updated |
| Category Score | Score: 3 / 3 | ||
2. System Security
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Authentication with other systems | Partial | 🔗 Proof | HTTP/MJPEG/ONVIF via user code; no public cloud API |
| Communications | No encryption | 🔗 Proof | HTTP only; TLS libraries exist but rarely flashed |
| Storage | No encryption | 🔗 Proof | Flash dump in plaintext; Wi-Fi creds in clear |
| Category Score | Score: 3 / 3 | ||
3. User Authentication
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Account management | Absent | 🔗 Proof | No accounts; single shared credentials if added |
| Authentication | Absent | 🔗 Proof | No login by default; user can add HTTP basic auth manually |
| Brute-force protection | Absent | 🔗 Proof | No lock-out, no CAPTCHA |
| Event logging | Absent | 🔗 Proof | No logging framework; serial only |
| Passwords | Default/Common/Easy to guess | 🔗 Proof | Many tutorials use admin/admin; no forced change |
| Category Score | Score: 3 / 3 | ||
Technical Specifications
| Property | Details |
|---|---|
| Operating System & App | FreeRTOS (ESP-IDF or Arduino) (Companion App: None (user firmware)) |
| Hardware (CPU / GPU) | CPU: Xtensa®/RISC-V dual-core @ 240 MHz (ESP32-S) • GPU: None |
| Memory & Storage | Memory: 520 KB SRAM + 4 MB PSRAM (external) • Storage: 4 MB SPI NOR flash (no encryption) |
| Power, Battery & Charging | Battery: None • Power: 5 V ⎓ 500 mA via micro-USB or 3.3 V header • Charging: micro-USB (no battery) |
| Display & Camera | Display: None (only status LED • Camera: OV2640 2 MP, 1600×1200 @ 15 fps, 66° FOV, IR-cut optional |
| Sound & Connectivity | Sound: None (user can add I²S mic) • Connectivity: Wi-Fi 4 (802.11 b/g/n) 2.4 GHz only; no BLE/Ethernet |
| Physical (Dimensions & Mass) | Dimensions: 40 × 27 × 10 mm (board only) • Mass: 10 g |
