| Reolink CX410
|
|
Security Grade
Calculator v
|
Reolink CX410
Category: Camera • Model / Gen: CX410
Release Date: 2023-06-01 • Status: In sale
|
Security Evaluation
1. Device Security
| Criterion
|
Value
|
Proof
|
Comment
|
| Known hardware tampering
|
Very common
|
🔗 Proof
|
The camera has an exposed microSD slot, reset button, PoE/RJ45 port, and adjustable mounting bracket; physical access is relatively easy.
|
| Known vulnerabilities
|
None
|
🔗 Proof
|
An exact-model NVD search returned no CVE records for the CX410 at the time of research.
|
| Prior attacks
|
None
|
🔗 Proof
|
No public model-specific botnet campaign was found.
|
| Updatability
|
Very common
|
🔗 Proof
|
Reolink publishes firmware and manuals in its Download Center.
|
| Category Score
|
Score: 2 / 3
|
2. System Security
| Criterion
|
Value
|
Proof
|
Comment
|
| Authentication with other systems
|
Partial
|
🔗 Proof
|
Supports ONVIF, RTSP, RTMP, and third-party clients; access is password-based rather than mutual authentication.
|
| Communications
|
Encrypted with obselete encryption
|
🔗 Proof
|
HTTPS/SSL is supported, but RTSP/ONVIF and other local protocols may be enabled without TLS; security depends on configuration.
|
| Storage
|
No encryption
|
🔗 Proof
|
Recordings can be stored on microSD, an NVR, or NAS; encryption at rest is not documented, so the default assumption is unencrypted local media.
|
| Category Score
|
Score: 3 / 3
|
3. User Authentication
| Criterion
|
Value
|
Proof
|
Comment
|
| Account management
|
Basic
|
🔗 Proof
|
Supports one administrator and up to 19 user accounts, but advanced role separation is not documented.
|
| Authentication
|
Basic
|
🔗 Proof
|
Password-based local and remote access; no device-specific MFA is documented.
|
| Brute-force protection
|
Basic
|
🔗 Proof
|
No public account-lockout or rate-limit policy; partial evidence only.
|
| Event logging
|
Partial logging
|
🔗 Proof
|
The app/client provides event playback and detection history; a separate administrator audit log is not documented.
|
| Passwords
|
Require change after setup with complexity requirements
|
https://reolink.com/download-center/ 🔗 Proof
|
Setup requires an administrator password; no shared default password is documented for this model.
|
| Category Score
|
Score: 2 / 3
|
Technical Specifications
| Property
|
Details
|
| Operating System & App
|
Embedded Linux firmware (Companion App: Reolink app (Android/iOS))
|
| Hardware (CPU / GPU)
|
CPU: • GPU:
|
| Memory & Storage
|
Memory: • Storage:
|
| Power, Battery & Charging
|
Battery: No • Power: • Charging: No
|
| Display & Camera
|
Display: No • Camera:
|
| Sound & Connectivity
|
Sound: • Connectivity: PoE Ethernet
|
| Physical (Dimensions & Mass)
|
Dimensions: • Mass:
|
Prepared from public product documentation, vendor security information, and NVD records. The release date is approximate where the vendor did not state a day. No device was physically tested, scanned, or attacked. Each score links to the public evidence used for the assessment.
