Eufy Indoor Cam 2K
From Wiki-IoT
Revision as of 14:54, 28 October 2026 by Jeandecian (talk | contribs)
(diff) ← Older revision | Approved revision (diff) | Latest revision (diff) | Newer revision → (diff)
| Eufy Indoor Cam 2K | ||
|---|---|---|
|
Security Grade
Calculator v1
|
Eufy Indoor Cam 2K
Brand: Eufy (Parent: Anker Innovations) Category: Indoor Security Camera • Model / Gen: 1 T8410 Release Date: 2021-01-01 • Status: In sale Classification Date: 2026-10-28 • Official Website | |
Contents
Security Evaluation
1. Device Security
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Known hardware tampering | None | 🔗 Proof | No documented hardware tampering or exposed debug ports |
| Known vulnerabilities | Very common | 🔗 Proof | CVE-2021-3555 RTSP buffer overflow; MitM firmware hijack; 2022 privacy scandal: unencrypted uploads, weak AES key |
| Prior attacks | None | 🔗 Proof | Not associated with major botnets like Mirai |
| Updatability | Very common | 🔗 Proof | Anker released fixes after the 2022 scandal; firmware updates are pushed regularly |
| Category Score | Score: 2 / 3 | ||
2. System Security
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Authentication with other systems | Partial | 🔗 Proof | Account-based cloud, but 2022 research showed thumbnails/facial data uploaded to AWS even with cloud disabled |
| Communications | No encryption | 🔗 Proof | 2022 scandal: unencrypted video streams viewable via VLC; Anker admitted cameras were not natively end-to-end encrypted |
| Storage | Encrypted with obselete encryption | 🔗 Proof | Very weak AES key used to encrypt footage; unencrypted thumbnails stored on AWS (later fixed) |
| Category Score | Score: 3 / 3 | ||
3. User Authentication
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Account management | Full | 🔗 Proof | eufy Security app supports multiple users and shared access |
| Authentication | Secure | 🔗 Proof | No hardcoded credentials; eufy account required for setup |
| Brute-force protection | Basic | 🔗 Proof | Account login protection exists but no detailed lockout policy published |
| Event logging | Partial logging | 🔗 Proof | App logs motion events but no full security audit log |
| Passwords | Require change after setup with complexity requirements | 🔗 Proof | No default device password; eufy account password required |
| Category Score | Score: 2 / 3 | ||
Technical Specifications
| Property | Details |
|---|---|
| Operating System & App | Proprietary firmware (Companion App: eufy Security App) |
| Hardware (CPU / GPU) | CPU: • GPU: |
| Memory & Storage | Memory: • Storage: microSD (local) |
| Power, Battery & Charging | Battery: None (wired) • Power: USB 5V adapter • Charging: |
| Display & Camera | Display: None • Camera: 2K (2304 x 1296), night vision, motion detection |
| Sound & Connectivity | Sound: Built-in microphone and speaker • Connectivity: Wi-Fi 802.11b/g/n (2.4 GHz), Bluetooth, Apple HomeKit / Google / Alexa |
| Physical (Dimensions & Mass) | Dimensions: • Mass: |
