VTech RM5752 Video Baby Monitor

VTech RM5752 Video Baby Monitor

Security Grade F Calculator v1

VTech RM5752 Video Baby Monitor Brand: VTech (VTech Telecommunications Ltd.) Category: Wi-Fi video baby monitor / IP camera with local parent unit • Model / Gen: RM5752 (camera baby unit + parent unit; MyVTech Baby 1080p app) Release Date: 2019-04-26 • Status: End of sale Classification Date: 2026-10-25 • [www.vtechphones.com/store/pd/4246/RM5752-5-Display-1080p-Smart-Wi-Fi-Remote-Access-Video-Baby-Monitor-with-Automatic-Night-Vision Official Website]

Security Evaluation

1. Device Security

Criterion	Value	Proof	Comment
Known hardware tampering	Rare	[www.ul.com/resources/privacy-risk-iot-cctv-camera-security 🔗 Proof]	documentary assessment, NOT device testing: UL black-box opened the enclosure and found an exposed UART test point yielding a root shell (uid=0) on the analyzed unit; exploitation still requires physical access, disassembly and probing, so rated Rare rather than Very common; conclusion limited to the firmware UL analyzed.
Known vulnerabilities	Very common	[www.ul.com/resources/privacy-risk-iot-cctv-camera-security 🔗 Proof]	documentary assessment, NOT device testing: UL publicly documented, for the analyzed RM5752 firmware, missing AES-128 despite marketing claim, static-key custom "Transcode" obfuscation instead of encryption, plaintext login/credential packet, replayable/modifiable H.264 video over the internet path, and an unlocked root UART console; multiple independent weaknesses demonstrated.
Prior attacks	Rare	[services.nvd.nist.gov/rest/json/cves/2.0?keywordSearch=VTech%20RM5752&resultsPerPage=10 🔗 Proof]	documentary assessment, NOT device testing: NVD keyword search returns zero CVEs for VTech RM5752 / VTech baby monitor; no publicly documented in-the-wild hijacking campaign of this exact model; known exposure is researcher/test-laboratory disclosure only.
Updatability	Rare	[www.vtechphones.com/support/technical-support/product/4246 🔗 Proof]	documentary assessment, NOT device testing: 2019 legacy unit; official support page lists manuals/FAQs but no current firmware build or download for RM5752; VTech's 4-year security-update commitment (PSTI policy v.18 Dec 2023) is prospective and does not evidence ongoing patches for this 2019 unit; UL issue disclosed with no public patch CVE found.
Category Score	Score: 3 / 3

2. System Security

Criterion	Value	Proof	Comment
Authentication with other systems	Partial	[auphones.vtech.com/support/faqs 🔗 Proof]	documentary assessment, NOT device testing: pairing requires same-LAN setup plus parent-unit security code/QR and a bound app account, but UL observed credentials in the clear on the wire and pairing trust was weak; Partial rather than Full because authentication was transport-compromised in the analyzed firmware.
Communications	No encryption	[www.ul.com/resources/privacy-risk-iot-cctv-camera-security 🔗 Proof]	documentary assessment, NOT device testing: UL verified that non-local internet traffic was not AES/TLS encrypted, only obfuscated with the hard-coded 32-byte key "Charlie is the designer of P2P!!"; eavesdroppers extracted login info and played back/modified the video stream; contradicts the vendor AES-128 marketing claim for the analyzed firmware.
Storage	No encryption	[www.ul.com/resources/privacy-risk-iot-cctv-camera-security 🔗 Proof]	documentary assessment, NOT device testing: UL extracted the full 128 MiB root filesystem via UART/tar over Wi-Fi with no at-rest encryption or storage lock documented; flash contents accessible after physical access; limited to the analyzed firmware image.
Category Score	Score: 3 / 3

3. User Authentication

Criterion	Value	Proof	Comment
Account management	Basic	[www.vtechphones.com/support/technical-support/product/4246 🔗 Proof]	documentary assessment, NOT device testing: camera is managed through the MyVTech Baby 1080p app account (pair/remove camera); no on-device account administration; Basic cloud-assisted pairing rather than full device-native account system.
Authentication	Basic	[www.ul.com/resources/privacy-risk-iot-cctv-camera-security 🔗 Proof]	documentary assessment, NOT device testing: app account plus parent-unit pairing code exist, but UL captured an early packet containing username/password authentication in plaintext over the obfuscated channel; weak transport authentication, rated Basic not Secure.
Brute-force protection	Absent	[www.vtechphones.com/support/technical-support/product/4246 🔗 Proof]	documentary assessment, NOT device testing: support documentation shows no lockout, delay or rate-limit against repeated pairing/credential attempts; none evidenced for the device; Absent on documentary basis only.
Event logging	Absent	[www.vtechphones.com/support/technical-support/product/4246 🔗 Proof]	documentary assessment, NOT device testing: no access/event log or audit trail of who viewed the camera is documented in the support materials; Absent on documentary basis only.
Passwords	Default/Common/Easy to guess	[www.ul.com/resources/privacy-risk-iot-cctv-camera-security 🔗 Proof]	documentary assessment, NOT device testing: the camera has no user-chosen strong password; trust rests on a parent-unit-assigned security key/QR, and UL recovered credential material from a plaintext packet; rated Default/common/easy-to-guess under the documentary rubric for the analyzed firmware.
Category Score	Score: 3 / 3

Technical Specifications

Property	Details
Operating System & App	Embedded Linux (U-Boot 2010.06 Mar 30 2018, Hisilicon SoC, ThroughTek/TUTK libIOTCAPIs; per UL analyzed firmware) (Companion App: )
Hardware (CPU / GPU)	CPU: • GPU:
Memory & Storage	Memory: • Storage:
Power, Battery & Charging	Battery: • Power: • Charging:
Display & Camera	Display: • Camera:
Sound & Connectivity	Sound: • Connectivity:
Physical (Dimensions & Mass)	Dimensions: • Mass: