AXIS Panoramic Camera P4707-PLVE

AXIS Panoramic Camera P4707-PLVE
Security Grade B Calculator v	AXIS P4707-PLVE Panoramic Camera Brand: AXIS (Parent: Canon Inc. (Canon Group)) Category: IP camera • Model / Gen: AXIS P47 Series P4707-PLVE Release Date: 2022-12-14 • Status: In sale Classification Date: • Official Website

Security Evaluation

1. Device Security

Criterion	Value	Proof	Comment
Known hardware tampering	Rare	[https://www.axis.com/dam/public/45/3c/a1/cve-2023-21414pdf-en-US-412758.pdf https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/21xxx/CVE-2023-21414.json https://www.axis.com/dam/public/9e/a8/03/datasheet-axis-p4707-plve-panoramic-camera-en-US-555877.pdf 🔗 Proof]	CVE-2023-21414 documents a physical-vector secure-boot bypass affecting ARTPEC-8 products on AXIS OS 10.11–11.5. This model uses ARTPEC-8. Fixed in 11.6.94; Rare is a qualitative historical mapping, not an exact-model victim claim.
Known vulnerabilities	Rare	[https://www.axis.com/dam/public/45/3c/a1/cve-2023-21414pdf-en-US-412758.pdf https://www.axis.com/dam/public/9e/a8/03/datasheet-axis-p4707-plve-panoramic-camera-en-US-555877.pdf https://help.axis.com/en-us/axis-os-release-notes-archive 🔗 Proof]	Historical ARTPEC-8 issue CVE-2023-21414 affected AXIS OS 10.11–11.5 and was fixed in Active Track 11.6.94. This records a concrete disclosed issue, not a claim that current supported AXIS OS remains unpatched.
Prior attacks	None	[https://help.axis.com/en-us/security-advisories https://www.axis.com/dam/public/45/3c/a1/cve-2023-21414pdf-en-US-412758.pdf 🔗 Proof]	No model-specific malicious IoT campaign was identified in the bounded exact-model and Axis-advisory review as of 2026-10-24. Vulnerability research is not counted as an observed in-the-wild attack, and absence from this review does not establish universal absence.
Updatability	Very common	[https://www.axis.com/products/axis-p4707-plve/support https://help.axis.com/en-us/axis-p4707-plve https://www.axis.com/products/axis-p4707-plve 🔗 Proof]	Axis maintains downloadable AXIS OS updates and model-specific release notes. The product page commits software support until 2035-12-31; administrators can upgrade through the web interface or Axis Device Manager. This is an actively maintained product, not a promise of a fixed monthly cadence.
Category Score	Score: 2 / 3

2. System Security

Criterion	Value	Proof	Comment
Authentication with other systems	Partial	[https://www.axis.com/dam/public/9e/a8/03/datasheet-axis-p4707-plve-panoramic-camera-en-US-555877.pdf https://help.axis.com/en-us/axis-os-knowledge-base 🔗 Proof]	IEEE 802.1X/EAP-TLS supports certificate-based mutual authentication when a trusted CA, client certificate and key are configured. This is not mandatory for every supported integration; optional legacy and discovery traffic prevent a blanket full-authentication claim.
Communications	Encrypted with up-to-date encryption	[https://www.axis.com/dam/public/9e/a8/03/datasheet-axis-p4707-plve-panoramic-camera-en-US-555877.pdf https://help.axis.com/en-us/axis-p4707-plve https://help.axis.com/en-us/axis-os-web-interface-help 🔗 Proof]	TLS 1.2/1.3, HTTPS/HSTS and SRTP/RTSPS support modern encryption for configured management and media paths. This rating assumes encrypted services and certificate validation are enabled and plaintext alternatives disabled; discovery traffic is not claimed to be encrypted.
Storage	Encrypted with up-to-date encryption	[https://www.axis.com/dam/public/9e/a8/03/datasheet-axis-p4707-plve-panoramic-camera-en-US-555877.pdf https://whitepapers.axis.com/en-us/axis-edge-vault 🔗 Proof]	The exact-model datasheet specifies an encrypted filesystem using AES-XTS-Plain64 with 256-bit encryption. Axis describes hardware-protected filesystem keys for persistent read/write data, including configuration. This assessment concerns internal flash data, not merely optional SD-recording encryption.
Category Score	Score: 2 / 3

3. User Authentication

Criterion	Value	Proof	Comment
Account management	Full	[https://help.axis.com/en-us/axis-p4707-plve https://help.axis.com/en-us/axis-os-web-interface-help 🔗 Proof]	AXIS OS supports distinct administrator, operator and viewer roles, creation of lower-privilege accounts, password changes, and account deletion. The exact-model manual directs administrators to the AXIS OS account-management interface.
Authentication	Basic	[https://help.axis.com/en-us/axis-p4707-plve https://www.axis.com/dam/public/9e/a8/03/datasheet-axis-p4707-plve-panoramic-camera-en-US-555877.pdf 🔗 Proof]	Local access uses administrator-created account credentials. Signed OS and secure boot protect software integrity, but are not a second user factor. A physical factory reset clears credentials and configuration, so Basic is the conservative local-authentication mapping rather than an unrestricted Secure claim.
Brute-force protection	Exist	[https://www.axis.com/dam/public/9e/a8/03/datasheet-axis-p4707-plve-panoramic-camera-en-US-555877.pdf https://help.axis.com/en-us/axis-os-knowledge-base 🔗 Proof]	AXIS OS can temporarily block a client IP after repeated failed HTTP(S) authentication. On 11.5 and later the default example is 20 failed attempts within one second followed by a 10-second block; thresholds are configurable. This is a documented attempt-limiting mechanism, not protection against every distributed attack.
Event logging	Access event logged	[https://help.axis.com/en-us/axis-p4707-plve https://help.axis.com/en-us/axis-os-knowledge-base 🔗 Proof]	The AXIS OS log system can record successful and failed device access. HTTP(S) success logging requires Access Log to be enabled; failed HTTP(S) attempts are logged only for an existing username. Remote syslog is recommended to retain records across resets and reboots.
Passwords	Require change after setup	[https://help.axis.com/en-us/axis-p4707-plve https://fehmijaafar.net/wiki-iot/index.php/Methodology 🔗 Proof]	First access requires creating an administrator account with a personal password; there is no default account on current AXIS OS. The middle label is used for mandatory initial credential provisioning. The model manual does not impose complexity or periodic password-change requirements; recommendations are not treated as enforcement.
Category Score	Score: 2 / 3

Technical Specifications

Property	Details
Operating System & App	AXIS OS (Companion App: AXIS Camera Station Edge / AXIS Camera Station Pro (optional management software))
Hardware (CPU / GPU)	CPU: ARTPEC-8 SoC • GPU: Not applicable — dedicated ARTPEC-8 video and DLPU processing, not a separate graphics-adapter specification
Memory & Storage	Memory: 2048 MB RAM • Storage: 8192 MB Flash; microSD/microSDHC/microSDXC card support; network-attached storage recording
Power, Battery & Charging	Battery: Not applicable — fixed-installation PoE-powered endpoint • Power: PoE IEEE 802.3at Type 2 Class 4; maximum 17.5 W • Charging: Not applicable — powered through PoE, not a rechargeable portable product
Display & Camera	Display: Not applicable — headless network camera; status LEDs • Camera: 2 × 1/2.7-inch progressive-scan RGB CMOS; 2 × 2592 × 1944; 3.3–8.1 mm varifocal lenses; up to 30/25 fps
Sound & Connectivity	Sound: External microphone/line input; digital audio input; network-speaker pairing • Connectivity: RJ45 10/100/1000BASE-T Ethernet with PoE; 3.5 mm mic/line input
Physical (Dimensions & Mass)	Dimensions: 88 × 133 × 208 mm (H × W × L) • Mass: 975 g

Evidence checked 2026-10-24. Exact P4707-PLVE hardware with supported, fully updated AXIS OS 12.x. Configuration-dependent rows assess a documented deployable hardened profile: HTTPS and encrypted media, trusted-certificate validation, plaintext services disabled, EAP-TLS where deployed, Access Log plus remote syslog enabled. They do not assert all defaults meet this profile. Historical CVEs are explicitly version-limited. The date field uses a dated official product video, not a claimed first-sale date.