| AXIS Dome Camera (P3265-V)
|
|
Security Grade
Calculator v1
|
AXIS P3265-V Dome Camera
Release Date: 2022-01-17 • Status: End of sale
|
Security Evaluation
1. Device Security
| Criterion
|
Value
|
Proof
|
Comment
|
| Known hardware tampering
|
Rare
|
[1] [2] 🔗 Proof
|
Historical patched ARTPEC-8 secure-boot bypasses: CVE-2023-21414 / CVE-2024-7784.
|
| Known vulnerabilities
|
Rare
|
[3] 🔗 Proof
|
Historical flaws documented; assessed LTS is patched.
|
| Prior attacks
|
None
|
[4] [5] 🔗 Proof
|
No model-specific attack located; a bounded finding, not proof of absence.
|
| Updatability
|
Very common
|
🔗 Proof
|
Successive firmware releases documented; assessed 11.11.220 LTS remains supported.
|
| Category Score
|
Score: 2 / 3
|
2. System Security
| Criterion
|
Value
|
Proof
|
Comment
|
| Authentication with other systems
|
Full
|
🔗 Proof
|
Mutual EAP-TLS and certificate-validated, authenticated integration are configured.
|
| Communications
|
Encrypted with up-to-date encryption
|
🔗 Proof
|
TLS 1.2/1.3 supported; encrypted-only service configuration assumed.
|
| Storage
|
Encrypted with up-to-date encryption
|
🔗 Proof
|
Internal filesystem: AES-XTS-Plain64 256-bit; removable-card encryption is separate.
|
| Category Score
|
Score: 1 / 3
|
3. User Authentication
| Criterion
|
Value
|
Proof
|
Comment
|
| Account management
|
Full
|
[6] 🔗 Proof
|
Accounts support roles, password updates and ordinary-account deletion.
|
| Authentication
|
Basic
|
🔗 Proof
|
Credentials protect configured access; physical factory reset replaces accounts without the previous password, limiting recovery assurance.
|
| Brute-force protection
|
Exist
|
🔗 Proof
|
Failed-login blocking/delay protection enabled.
|
| Event logging
|
Access event logged
|
🔗 Proof
|
Access-event logging enabled; failed logins recorded; remote retention configured.
|
| Passwords
|
Require change after setup
|
[7] 🔗 Proof
|
Administrator credentials must be created at first use; assessed 11.11 LTS does not enforce password complexity.
|
| Category Score
|
Score: 2 / 3
|
Technical Specifications
| Property
|
Details
|
| Operating System & App
|
AXIS OS 11.11.220 (LTS 2024; assessed supported version) (Companion App: Built-in web interface; AXIS Camera Station (optional video management software))
|
| Hardware (CPU / GPU)
|
CPU: AXIS ARTPEC-8 system-on-chip; CPU clock not specified; integrated deep learning processing unit (DLPU) • GPU:
|
| Memory & Storage
|
Memory: 1024 MB RAM; 8192 MB flash • Storage: microSD/microSDHC/microSDXC slot; NAS recording support
|
| Power, Battery & Charging
|
Battery: No operating battery specified; PoE-powered • Power: IEEE 802.3af/802.3at Type 1 PoE, Class 2; typical 3 W, maximum 5.1 W • Charging: Not applicable (PoE-powered)
|
| Display & Camera
|
Display: No integrated display • Camera: 2 MP, 1920 x 1080; 1/2.8-inch RGB CMOS; 3.4-8.9 mm F1.8 varifocal lens; up to 50/60 fps without WDR. No built-in IR illuminator
|
| Sound & Connectivity
|
Sound: Two-way full-duplex audio with external microphone/line input and line output; no built-in microphone • Connectivity: RJ45 10/100 Ethernet with PoE; audio and digital I/O; IPv4/IPv6, VAPIX and ONVIF
|
| Physical (Dimensions & Mass)
|
Dimensions: 149 mm diameter x 103 mm height • Mass: 650 g
|
Scope
Documentary assessment checked 2026-10-22, without physical-device testing. Assessed firmware: supported AXIS OS 11.11.220 LTS 2024. Configuration: unique accounts, anonymous access disabled, certificate-validated HTTPS and mutual EAP-TLS, encrypted media transport, unused plaintext services disabled, internal filesystem encryption, removable-storage encryption when used, brute-force protection and access logging enabled. The grade applies to this configured deployment. Newer AXIS OS password-policy and audit-log features are outside scope.
- Release date records a dated public announcement: 2022-01-17 (announcement); Q1 2022 announced availability, exact first shipment date not verified.
- Prior-attacks and Rare labels are qualitative research judgments, not measured occurrence rates.
- Unknown optional general/hardware fields remain blank; a blank is not evidence of absence.
- Final-order/discontinuation date: 2025-12-31. Hardware/RMA and software support: through 2031-12-31.
Scoring
Device: ceil((2+2+1+1)/4) = 2. System: ceil((1+1+1)/3) = 1. User Authentication: ceil((1+2+1+1+2)/5) = 2. GRAS = 2+1+2 = 5; grade A-. This is a contributor calculation, not administrator approval.
References
