Wyze Cam v3 (Smart Wi-Fi Camera)

From Wiki-IoT
Revision as of 15:04, 27 September 2025 by Yu (talk | contribs) (Created page with "{{Classification |name=Wyze Cam v3 Smart Wi-Fi Camera |brand=Wyze |parent_company=Wyze Labs, Inc. |website=https://wyze.com/products/wyze-cam-v3 |release_date=2020-10-08 |gene...")

(diff) ← Older revision | Approved revision (diff) | Latest revision (diff) | Newer revision → (diff)


Classification

Wyze Cam v3 (Smart Wi-Fi Camera)
Classification
Grade D
Calculator version [[:Category:Calculator v|]]
Classification date
Information
Name Wyze Cam v3 Smart Wi-Fi Camera
Brand by Parent Wyze by Wyze Labs, Inc.
Generation 3rd gen
Model(s) WYZEC3 (US), WYZEC3-32 (32 GB bundle)
Release date 2020-10-08
Type/Category Smart indoor/outdoor Wi-Fi camera
Website [1]
Status In sale
More
Dimensions 52 × 51 × 58 mm
Mass 98 g
Operating system T31X Linux (closed WyzeOS)
Companion App Wyze (iOS/Android)
CPU Ingenic T31X @ 1 GHz (MIPS32)
GPU Integrated H.264/H.265 encoder
Memory 128 MB DDR3
Storage micro-SD up to 256 GB (FAT32) + 512 Mb NAND (no encryption)
Battery None
Power 5 V ⎓ 1 A USB-A cable
Charging USB-A (no battery)
Display None (RGB status LED)
Camera 1/2.8″ CMOS, 1920×1080 @ 20 fps, 2.1 mm lens, IR 30 m, IP65
Sound 1 mic + 1 speaker (2-way talk)
Connectivity Wi-Fi 4 (802.11 b/g/n) 2.4 GHz only; no BLE/Ethernet
Device
Criterion Value Proof(s) Comment
Known hardware tampering Rare [2] Security screws; UART under epoxy; micro-SD slot accessible
Known vulnerabilities Very common [3] Unauth RTSP stream leak (≤ 4.36.3.131)
Prior attacks Very common [4] Mirai off-shoot “Wyzei” brute-forces weak creds
Updatability Very common [5] Automatic OTA every 3 weeks; signed images
Category score 3
System
Criterion Value Proof(s) Comment
Authentication with other systems Full [6] Alexa, Google Home, IFTTT, open REST API (local control beta)
Communications Encrypted with obselete encryption [7] TLS 1.2, weak ciphers, no cert pinning
Storage No encryption [8] NAND & SD card FAT32 plaintext; Wi-Fi creds in clear
Category score 2
User Authentication
Criterion Value Proof(s) Comment
Account management Basic [9] Single account; no roles; sharing via link
Authentication Basic [10] Wyze-account + optional 2FA (TOTP)
Brute-force protection Basic [11] Account lock-out after 5 fails; device itself has none
Event logging Partial logging [12] Motion & sound events; no syslog, no failed-login log
Passwords Default/Common/Easy to guess [13] Many users keep “admin/admin”; no forced change
Category score 3
Grade D