| Reolink Argus 3 Pro (A3100)
|
|
Security Grade
Calculator v1
|
Reolink Argus 3 Pro (A3100)
Release Date: 2021-06-01 • Status: In sale
|
Security Evaluation
1. Device Security
| Criterion
|
Value
|
Proof
|
Comment
|
| Known hardware tampering
|
Rare
|
🔗 Proof
|
No UART exposure reported for this model; the doorbell line of the same brand is affected by CVE-2025-60856.
|
| Known vulnerabilities
|
Rare
|
🔗 Proof
|
115 CVEs are recorded against the Reolink brand, but none specific to Argus 3 Pro; shared P2P components are affected by CVE-2020-25169 and CVE-2020-25173.
|
| Prior attacks
|
None
|
🔗 Proof
|
CISA KEV entries for the brand concern older models such as RLC-410W, not this model.
|
| Updatability
|
Very common
|
🔗 Proof
|
Reolink publishes firmware updates on a regular basis.
|
| Category Score
|
Score: 2 / 3
|
2. System Security
| Criterion
|
Value
|
Proof
|
Comment
|
| Authentication with other systems
|
Partial
|
🔗 Proof
|
CVE-2020-25169: affected Reolink P2P products do not sufficiently protect data transferred between the local device and Reolink servers.
|
| Communications
|
Encrypted with obselete encryption
|
🔗 Proof
|
CVE-2020-25173: a fixed cryptography key can be obtained by an attacker with local network access, which may compromise communications beyond the LAN.
|
| Storage
|
Encrypted with obselete encryption
|
🔗 Proof
|
No vendor documentation of encryption at rest for microSD recordings.
|
| Category Score
|
Score: 2 / 3
|
3. User Authentication
| Criterion
|
Value
|
Proof
|
Comment
|
| Account management
|
Basic
|
🔗 Proof
|
CVE-2024-48644: the login component allows remote account enumeration on Reolink cameras.
|
| Authentication
|
Basic
|
🔗 Proof
|
Account enumeration through differing login responses facilitates targeted password attacks.
|
| Brute-force protection
|
Basic
|
🔗 Proof
|
CVE-2026-57473 shows brand services where credentials can be brute-force cracked.
|
| Event logging
|
Partial logging
|
🔗 Proof
|
Recording and access history are available but no full security audit log is documented.
|
| Passwords
|
Require change after setup
|
🔗 Proof
|
A password is defined during initial configuration; no enforced complexity policy documented.
|
| Category Score
|
Score: 2 / 3
|
Technical Specifications
| Property
|
Details
|
| Operating System & App
|
Embedded Linux (Companion App: Reolink App)
|
| Hardware (CPU / GPU)
|
CPU: • GPU:
|
| Memory & Storage
|
Memory: • Storage: microSD up to 128 GB
|
| Power, Battery & Charging
|
Battery: Rechargeable 6000 mAh (solar panel optional) • Power: Battery / 5 V DC • Charging: USB-C, optional Reolink solar panel
|
| Display & Camera
|
Display: • Camera: 2K 4MP, starlight night vision, 122 degree field of view
|
| Sound & Connectivity
|
Sound: Two-way audio, microphone and speaker • Connectivity: Wi-Fi 802.11 b/g/n dual band, P2P
|
| Physical (Dimensions & Mass)
|
Dimensions: 121 x 90 x 56 mm • Mass: approx. 330 g
|
Overall assessment: Argus 3 Pro has no model-specific CVE and benefits from regular firmware releases. Risk comes from brand-wide issues in the shared P2P stack: CVE-2020-25169 (weak protection of device-to-server traffic) and CVE-2020-25173 (fixed cryptographic key recoverable on the LAN). Account enumeration (CVE-2024-48644) and undocumented encryption at rest for microSD recordings further lower the score. KEV listings for the brand target older RLC models, not this one.
