You do not have permission to edit this page, for the following reasons:
'''Evidence review addendum — 2026-10-24. Public-document review; ratings with evidence gaps remain provisional.''' This addendum supersedes earlier inconsistent wording on the same fields. It is based on public documents and the saved website snapshot; no installed device was tested. Historical research below remains historical evidence. Unverified flash protection and interface-specific controls are not verified device facts. == Documented basic information == * 销售/生命周期: End of sale / no longer available (not sufficient alone to establish support end) [https://www.wyze.com/products/wyze-cam-v2 Source] * 电源: DC 5 V, 1 A via micro-USB; adapter AC input 100–240 V [https://support.wyze.com/hc/en-us/articles/7990631096091-More-Wyze-Cam-v1-v2-Pan-FAQ Source] * 摄像头: 1080p; 2.8 mm lens, f/2.0, 110° field of view; 1/2.9-inch sensor [https://www.wyze.com/products/wyze-cam-v2 Source] * 声音: Built-in microphone/speaker; half-duplex two-way audio [https://support.wyze.com/hc/en-us/articles/7990737435547-Wyze-Cam-v1-v2-Pan-Features Source] * 连接方式: 2.4 GHz Wi-Fi; micro-USB power; USB-A accessory/daisy-chain port [https://support.wyze.com/hc/en-us/articles/360030110891-Wyze-Cam-v1-v2-and-Wyze-Cam-Pan-v1-Setup-Guide Source] [https://support.wyze.com/hc/en-us/articles/7990631096091-More-Wyze-Cam-v1-v2-Pan-FAQ Source] * 型号: Wyze Cam v2; manufacturer model WYZEC2; physical label not inspected [https://forums.wyze.com/t/wyze-cam-v2-f-a-q-everything-you-need-to-know/3903 Source] == Revised security evidence notes == * 防暴力破解: A 2020 Avast test observed Wyze account brute-force protection and a too-many-attempts message. This is historical cloud evidence, not a current v2-local threshold or a universal 15-minute guarantee. [https://www.gendigital.com/blog/insights/research/testing-ip-camera-account-security Source] == Scoring status == Existing selected scores are a saved comparison baseline, not newly validated final scores. Recheck version, region and assessment path before updating options. Recalculate CATS/GRAS and synchronize this section after all selected options are settled. Do not infer a secure or insecure flash state from a downloadable firmware image or encrypted data volumes. ---- '''Research assessment reviewed 2026-10-22. This grade is an assessor risk profile based on the stated evidence and inferences, not a test or certification of an individual installed device.''' == Assessment scope and limits == Stock v2, not v1/v3 or custom RTSP firmware. Latest v2 entry visible in reviewed combined history: 4.9.9.3006 (2024-01-16), requiring app 2.48+. This is not a verified lifecycle statement. Historical vulnerability evidence, current documented capabilities and assessor inferences are identified separately in the comments. Historical-build findings are not asserted in every patched build. Configuration-dependent benefits apply only when the specified settings are enabled. The rubric does not define numerical Rare/Very common thresholds; qualitative mappings are explained. Release date is the 18 February 2018 announcement supplied by Wyze staff; the same source says first units shipped in early April after a hardware delay. This is a research profile combining explicitly scoped historical device findings and documented cloud capabilities, not certification of the newest firmware. [https://forums.wyze.com/t/when-did-camera-come-out/19252 Wyze staff launch-date explanation] == Calculation cross-check == Device CRIS 2, 3, 1, 2, CATS 2. System CRIS 2, 1, 3, CATS 2. User Authentication CRIS 2, 2, 2, 2, 3, CATS 3. GRAS 7; expected Grade C. [https://fehmijaafar.net/wiki-iot/index.php/Methodology Methodology] == Historical vulnerabilities and remediation == === CVE-2019-9564: Remote-connection authentication bypass === * Affected scope: Historical v2 remote-connection path; exact first vulnerable build unspecified. * Preconditions: Reachable affected protocol and missing secret validation. * Impact: Unauthorized control; this flaw alone does not decrypt the live stream. * Remediation: Researchers report v2 fix on 2019-09-24; exact build not supplied. * Severity: Numeric score not independently verified; omitted. * Evidence: [https://www.bitdefender.com/files/News/CaseStudies/study/413/Bitdefender-PR-Whitepaper-WCam-creat5991-en-EN.pdf Bitdefender original Wyze research] === CVE-2019-12266: Stack buffer overflow === * Affected scope: Historical camera connection path; paper includes v2; exact affected app/firmware range unspecified. * Preconditions: Access to affected function; may chain with authentication weakness. * Impact: Remote code execution. * Remediation: Researchers report an app fix on 2020-11-09; exact app build not supplied. * Severity: Numeric score not independently verified; omitted. * Evidence: [https://www.bitdefender.com/files/News/CaseStudies/study/413/Bitdefender-PR-Whitepaper-WCam-creat5991-en-EN.pdf Bitdefender original Wyze research]
For new submissions, pages will appear blank until approval.
Summary: This is a minor edit Watch this page
Save page Show preview Show changes Cancel
