Reolink CX410

Reolink CX410
Security Grade C Calculator v1	Reolink CX410 Brand: Reolink (Parent: Reolink Innovation Limited) Category: Camera • Model / Gen: CX410 Release Date: 2023-06-01 • Status: In sale Classification Date: 2026-10-25 • Official Website

Security Evaluation

1. Device Security

Criterion	Value	Proof	Comment
Known hardware tampering	Very common	🔗 Proof	The camera has an exposed microSD slot, reset button, PoE/RJ45 port, and adjustable mounting bracket; physical access is relatively easy.
Known vulnerabilities	None	🔗 Proof	An exact-model NVD search returned no CVE records for the CX410 at the time of research.
Prior attacks	None	🔗 Proof	No public model-specific botnet campaign was found.
Updatability	Very common	🔗 Proof	Reolink publishes firmware and manuals in its Download Center.
Category Score	Score: 2 / 3

2. System Security

Criterion	Value	Proof	Comment
Authentication with other systems	Partial	🔗 Proof	Supports ONVIF, RTSP, RTMP, and third-party clients; access is password-based rather than mutual authentication.
Communications	Encrypted with obselete encryption	🔗 Proof	HTTPS/SSL is supported, but RTSP/ONVIF and other local protocols may be enabled without TLS; security depends on configuration.
Storage	No encryption	🔗 Proof	Recordings can be stored on microSD, an NVR, or NAS; encryption at rest is not documented, so the default assumption is unencrypted local media.
Category Score	Score: 3 / 3

3. User Authentication

Criterion	Value	Proof	Comment
Account management	Basic	🔗 Proof	Supports one administrator and up to 19 user accounts, but advanced role separation is not documented.
Authentication	Basic	🔗 Proof	Password-based local and remote access; no device-specific MFA is documented.
Brute-force protection	Basic	🔗 Proof	No public account-lockout or rate-limit policy; partial evidence only.
Event logging	Partial logging	🔗 Proof	The app/client provides event playback and detection history; a separate administrator audit log is not documented.
Passwords	Require change after setup with complexity requirements	https://reolink.com/download-center/ 🔗 Proof	Setup requires an administrator password; no shared default password is documented for this model.
Category Score	Score: 2 / 3

Technical Specifications

Property	Details
Operating System & App	Embedded Linux firmware (Companion App: Reolink app (Android/iOS))
Hardware (CPU / GPU)	CPU: • GPU:
Memory & Storage	Memory: • Storage:
Power, Battery & Charging	Battery: No • Power: • Charging: No
Display & Camera	Display: No • Camera:
Sound & Connectivity	Sound: • Connectivity: PoE Ethernet
Physical (Dimensions & Mass)	Dimensions: • Mass:

Prepared from public product documentation, vendor security information, and NVD records. The release date is approximate where the vendor did not state a day. No device was physically tested, scanned, or attacked. Each score links to the public evidence used for the assessment.