| AXIS Dome Camera (M3085-V)
|
|
Security Grade
Calculator v
|
AXIS M3085-V Dome Camera
Release Date: 2022-08-31 • Status:
|
Security Evaluation
1. Device Security
| Criterion
|
Value
|
Proof
|
Comment
|
| Known hardware tampering
|
Rare
|
[1] [2] 🔗 Proof
|
Documented physical reset and removable storage expose physical-access paths.
|
| Known vulnerabilities
|
Rare
|
[3] 🔗 Proof
|
Historical CVE-2023-21413; assessed LTS is newer than its fix.
|
| Prior attacks
|
None
|
[4] 🔗 Proof
|
No model-specific attack located; a bounded finding, not proof of absence.
|
| Updatability
|
Very common
|
🔗 Proof
|
Successive firmware releases documented; assessed 11.11.220 LTS remains supported.
|
| Category Score
|
Score: 2 / 3
|
2. System Security
| Criterion
|
Value
|
Proof
|
Comment
|
| Authentication with other systems
|
Full
|
🔗 Proof
|
Mutual EAP-TLS and certificate-validated, authenticated integration are configured.
|
| Communications
|
Encrypted with up-to-date encryption
|
🔗 Proof
|
TLS 1.2/1.3 supported; encrypted-only service configuration assumed.
|
| Storage
|
Encrypted with up-to-date encryption
|
🔗 Proof
|
Internal filesystem: AES-XTS-Plain64 256-bit; removable-card encryption is separate.
|
| Category Score
|
Score: 1 / 3
|
3. User Authentication
| Criterion
|
Value
|
Proof
|
Comment
|
| Account management
|
Full
|
[5] 🔗 Proof
|
Accounts support roles, password updates and ordinary-account deletion.
|
| Authentication
|
Basic
|
🔗 Proof
|
Credentials protect configured access; physical factory reset replaces accounts without the previous password, limiting recovery assurance.
|
| Brute-force protection
|
Exist
|
🔗 Proof
|
Failed-login blocking/delay protection enabled.
|
| Event logging
|
Access event logged
|
[6] 🔗 Proof
|
Access-event logging enabled; failed logins recorded; remote retention configured.
|
| Passwords
|
Require change after setup
|
[7] 🔗 Proof
|
Administrator credentials must be created at first use; assessed 11.11 LTS does not enforce password complexity.
|
| Category Score
|
Score: 2 / 3
|
Technical Specifications
| Property
|
Details
|
| Operating System & App
|
AXIS OS 11.11.220 (LTS 2024; assessed supported version) (Companion App: AXIS Device Manager; browser-based device interface)
|
| Hardware (CPU / GPU)
|
CPU: Ambarella CV25 system-on-chip; DLPU • GPU:
|
| Memory & Storage
|
Memory: 1024 MB RAM; 512 MB flash • Storage: microSD/microSDHC/microSDXC slot; NAS recording supported
|
| Power, Battery & Charging
|
Battery: • Power: PoE; typical 3.6 W, maximum 4.2 W • Charging:
|
| Display & Camera
|
Display: • Camera: 1/2.9-inch progressive-scan RGB CMOS; 1920 x 1080 (2 MP); 3.1 mm, F2.0; 25/30 fps at 50/60 Hz
|
| Sound & Connectivity
|
Sound: • Connectivity: 10BASE-T/100BASE-TX Ethernet (RJ45); Wired Ethernet; PoE IEEE 802.3af/802.3at Type 1 Class 2
|
| Physical (Dimensions & Mass)
|
Dimensions: Height 56 mm; diameter 101 mm • Mass: 150 g
|
Scope
Documentary assessment checked 2026-10-22, without physical-device testing. Assessed firmware: supported AXIS OS 11.11.220 LTS 2024. Configuration: unique accounts, anonymous access disabled, certificate-validated HTTPS and mutual EAP-TLS, encrypted media transport, unused plaintext services disabled, internal filesystem encryption, removable-storage encryption when used, brute-force protection and access logging enabled. The grade applies to this configured deployment. Newer AXIS OS password-policy and audit-log features are outside scope.
- Release date records a dated public announcement: 2022-08-31 (dated public announcement; exact first shipment unverified).
- Prior-attacks and Rare labels are qualitative research judgments, not measured occurrence rates.
- Unknown optional general/hardware fields remain blank; a blank is not evidence of absence.
- Ambarella CV25 hardware; ARTPEC-8-specific secure-boot advisories are not attributed to this model.
Scoring
Device: ceil((2+2+1+1)/4) = 2. System: ceil((1+1+1)/3) = 1. User Authentication: ceil((1+2+1+1+2)/5) = 2. GRAS = 2+1+2 = 5; grade A-. This is a contributor calculation, not administrator approval.
References
