| Uniview IPC2124SR3-APF40 (APF40)
|
|
Security Grade
Calculator v1
|
Uniview IPC2124SR3-APF40 (APF40)
Category: Camera • Model / Gen: IPC2124SR3-APF40
Release Date: 2019-01-01 • Status: In sale
|
Security Evaluation
1. Device Security
| Criterion
|
Value
|
Proof
|
Comment
|
| Known hardware tampering
|
None
|
—
|
No published hardware-tampering research for this model was found as of 2026-10; reaching the microSD slot or reset button requires opening the outdoor housing. Provisional value, not directly evidenced.
|
| Known vulnerabilities
|
Very common
|
[https://nvd.nist.gov/vuln/detail/CVE-2021-45039
https://ssd-disclosure.com/ssd-advisory--uniview-preauth-rce/ 🔗 Proof]
|
CVE-2021-45039 (CVSS 9.8): undocumented UDP service on port 7788 in the IPC21/IPC23/IPC32/IPC36/IPC62 series allows an unauthenticated buffer overflow leading to remote code execution. IPC2124SR3 belongs to the IPC21 series. CVE-2023-0773 is a further Uniview IP-camera web-interface authentication failure (different CPE).
|
| Prior attacks
|
Rare
|
🔗 Proof
|
Uniview hardware appears in IoT botnet activity: Akamai documented the NetKiller.Condi botnet exploiting Uniview CVE-2024-0778 roughly one week after disclosure. That campaign targeted the ISC series, not IPC2124SR3; no campaign specifically naming this camera model was found.
|
| Updatability
|
Rare
|
🔗 Proof
|
Uniview runs a vulnerability-response programme and published an advisory for CVE-2021-45039, but this camera line has no automatic update mechanism; firmware is applied manually, so field units commonly stay unpatched.
|
| Category Score
|
Score: 2 / 3
|
2. System Security
| Criterion
|
Value
|
Proof
|
Comment
|
| Authentication with other systems
|
No
|
🔗 Proof
|
The undocumented UDP service on port 7788 accepts connections from remote unauthenticated peers, so no authentication is enforced on that inter-system channel.
|
| Communications
|
No encryption
|
🔗 Proof
|
The UDP 7788 service documented in CVE-2021-45039 is plaintext and unauthenticated. Primary video streaming on this line is RTSP/HTTP and is not encrypted by default.
|
| Storage
|
No encryption
|
—
|
No at-rest encryption is documented for local microSD recordings on this camera line. Provisional value inferred from the absence of documented storage encryption; not directly evidenced.
|
| Category Score
|
Score: 3 / 3
|
3. User Authentication
| Criterion
|
Value
|
Proof
|
Comment
|
| Account management
|
Basic
|
—
|
The web interface provides a small fixed set of roles (admin/operator/viewer) with no fine-grained permissions. Provisional value, not directly evidenced for this model.
|
| Authentication
|
Basic
|
🔗 Proof
|
Username/password login on the web interface, but CVE-2021-45039 shows authentication can be bypassed entirely on the IPC21 series through the port 7788 service.
|
| Brute-force protection
|
Absent
|
🔗 Proof
|
The telnetd service reached through CVE-2021-45039 uses hardcoded root/123456 credentials; no lockout or rate limiting is documented for this line, so guessing is trivial.
|
| Event logging
|
Partial logging
|
—
|
The device exposes a basic system log of access and event entries in the web interface, with no centralised or tamper-evident logging. Provisional value, not directly evidenced.
|
| Passwords
|
Default/Common/Easy to guess
|
🔗 Proof
|
CVE-2021-45039 documents a hardcoded default username and password (root/123456) on the telnetd service of the IPC21 series.
|
| Category Score
|
Score: 3 / 3
|
Technical Specifications
| Property
|
Details
|
| Operating System & App
|
Embedded Linux (Companion App: )
|
| Hardware (CPU / GPU)
|
CPU: • GPU:
|
| Memory & Storage
|
Memory: • Storage:
|
| Power, Battery & Charging
|
Battery: • Power: • Charging:
|
| Display & Camera
|
Display: • Camera:
|
| Sound & Connectivity
|
Sound: • Connectivity: Ethernet (RJ45), PoE
|
| Physical (Dimensions & Mass)
|
Dimensions: • Mass:
|
The Uniview IPC2124SR3-APF40 is a 4MP mini fixed bullet network camera from the Uniview Prime series, part of the broader IPC21 family. Its most serious documented weakness is CVE-2021-45039 (CVSS 9.8), an unauthenticated buffer overflow in an undocumented UDP service on port 7788 that affects the IPC21/IPC23/IPC32/IPC36/IPC62 lines and allows remote code execution and ultimately a telnetd login with hardcoded root/123456 credentials. CVE-2023-0773 additionally describes an authentication failure in the Uniview IP-camera web management interface, though its recorded CPE names a different model. Uniview operates a vulnerability-response programme and issued an advisory for the port 7788 flaw, yet the camera line has no automatic firmware update path, so a large share of deployed units are likely unpatched. The device is therefore rated D: remote pre-authentication compromise is documented and the default credential path defeats the user-authentication controls that remain. Values for hardware tampering, storage encryption, account management and event logging are provisional because no model-level public documentation could be retrieved.
