Hikvision DS-2CD2042WD-I
From Wiki-IoT
| Hikvision DS-2CD2042WD-I | ||
|---|---|---|
|
Security Grade
Calculator v1
|
Hikvision DS-2CD2042WD-I 4 MP WDR Mini Bullet Network Camera
Brand: Hikvision (Parent: Hangzhou Hikvision Digital Technology Co., Ltd.) Category: Outdoor bullet IP camera • Model / Gen: EasyIP 2.0 DS-2CD2042WD-I (4 mm, 6 mm lens variants) Release Date: 2016-06-09 • Status: In sale Classification Date: 2025-10-05 • Official Website | |
Contents
Security Evaluation
1. Device Security
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Known hardware tampering | Very common | 🔗 Proof | Labelled UART pads, no epoxy, plastic case snaps open |
| Known vulnerabilities | Very common | 🔗 Proof | Auth-bypass / user-list leak / config download without login |
| Prior attacks | Very common | 🔗 Proof | Mirai variants (e.g., “Hakai”) actively exploit CVE-2017-7921 |
| Updatability | Rare | 🔗 Proof | Last firmware V5.4.41 build 170310 (2017-03); no automatic OTA; regional images only |
| Category Score | Score: 3 / 3 | ||
2. System Security
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Authentication with other systems | Partial | 🔗 Proof | /Security/users?auth=YWRtaW46MTEK returns admin hash without login |
| Communications | Encrypted with obselete encryption | 🔗 Proof | TLS 1.0 only, weak ciphers, no cert pinning |
| Storage | No encryption | 🔗 Proof | NAND flash dumped in plaintext; config file readable |
| Category Score | Score: 3 / 3 | ||
3. User Authentication
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Account management | Basic | 🔗 Proof | Single admin + 31 users; no RBAC, no guest role |
| Authentication | Basic | 🔗 Proof | Username + password only; no 2FA, no SSO |
| Brute-force protection | Absent | 🔗 Proof | No lock-out, no CAPTCHA, unlimited login attempts |
| Event logging | Partial logging | 🔗 Proof | Web UI shows login/logout; no syslog export, no failed-auth log export |
| Passwords | Default/Common/Easy to guess | 🔗 Proof | Factory admin/12345 widely deployed; no forced change, no complexity |
| Category Score | Score: 3 / 3 | ||
Technical Specifications
| Property | Details |
|---|---|
| Operating System & App | Embedded Linux (HiLinux) (Companion App: Hik-Connect / iVMS-4200 / Web browser) |
| Hardware (CPU / GPU) | CPU: ARM Cortex-A7 @ 600 MHz (HiSilicon Hi3516D V300) • GPU: Integrated ISP (HDR, WDR, 3D-DNR) |
| Memory & Storage | Memory: 512 MB DDR3 • Storage: 128 MB NAND flash (no encryption) |
| Power, Battery & Charging | Battery: None • Power: 12 V ⎓ 1 A or IEEE 802.3af PoE (≤ 5 W) • Charging: Not applicable |
| Display & Camera | Display: None (only IR-cut status LED) • Camera: 1/3″ progressive-scan CMOS, 2688 × 1520 @ 20 fps, 4 mm/6 mm F2.0 lens, 120 dB WDR, IR 30 m |
| Sound & Connectivity | Sound: Built-in microphone (audio model), no speaker • Connectivity: 10/100 M RJ-45, Wi-Fi none, supports ONVIF, RTSP, HTTP/HTTPS, FTP, DDNS, SNMP, IPv4/IPv6 |
| Physical (Dimensions & Mass) | Dimensions: 70 × 154 × 61 mm • Mass: 500 g |
