Wyze Cam Pan v3 (WYZECP3)

From Wiki-IoT
Revision as of 14:37, 25 October 2026 by TJUTZT (talk | contribs) (Student assignment submission for IoT security assessment)
(diff) ← Older revision | Latest revision (diff) | Newer revision β†’ (diff)



Wyze Cam Pan v3 (WYZECP3)
Security Grade
   
     B
   
Calculator v1
Wyze Cam Pan v3
   Brand: Wyze (Parent: Wyze Labs, Inc.)
   Category: Camera • Model / Gen: 3rd generation (Cam Pan v3) WYZECP3
   Release Date: 2023-02-01 • Status: In sale
   Classification Date: 2026-10-25 • Official Website

Security Evaluation

1. Device Security

Criterion Value Proof Comment
Known hardware tampering Rare https://nvd.nist.gov/vuln/detail/CVE-2019-9564 πŸ”— Proof Exposed microSD/USB and no tamper switch; Bitdefender attacks required local or adjacent access; no public physical-tampering campaign found.
Known vulnerabilities Very common https://nvd.nist.gov/vuln/detail/CVE-2024-6248 https://services.nvd.nist.gov/rest/json/cves/2.0?keywordSearch=Wyze&resultsPerPage=50 πŸ”— Proof Wyze cameras have repeated critical CVE families (auth bypass, cloud auth RCE, Wi-Fi driver RCE). Pan v3 has no model-specific CVE, but shares the Wyze camera platform and cloud service.
Prior attacks Rare https://www.bleepingcomputer.com/news/security/wyze-camera-glitch-gave-13-000-users-a-peek-into-other-homes/ https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json πŸ”— Proof 2019 server leak exposed ~2.4M users; 2024 caching bug showed ~13k users others' thumbnails; both cloud-side, no firmware exploitation campaign; not in CISA KEV.
Updatability Very common https://support.wyze.com/hc/en-us/articles/360024852172-Release-Notes-Firmware πŸ”— Proof Firmware 4.50.16.7064 released 2026-07-15; Wyze continues firmware and app release notes.
Category Score Score: 2 / 3

2. System Security

Criterion Value Proof Comment
Authentication with other systems Partial https://www.wyze.com/products/wyze-cam-pan πŸ”— Proof Supports Alexa, Google Assistant and IFTTT; no HomeKit, Matter or enterprise SSO.
Communications Encrypted with up-to-date encryption https://support.wyze.com/hc/en-us/articles/11795670894875-Wyze-Cam-Pan-v3-Tech-Specs πŸ”— Proof Wyze states HTTPS/TLS plus AES-128 for live and playback data; Wi-Fi supports WPA/WPA2.
Storage No encryption https://forums.wyze.com/t/no-security-for-sd-cards/132474/9 πŸ”— Proof Cloud event video uses AES-128, but microSD recordings are plaintext MP4 readable on a PC per user tests and Wyze support.
Category Score Score: 2 / 3

3. User Authentication

Criterion Value Proof Comment
Account management Full https://www.wyze.com/products/wyze-cam-pan πŸ”— Proof Account registration, device sharing with owner-only configuration, 2FA, passkeys and third-party sign-in are supported.
Authentication Secure https://support.wyze.com/hc/en-us/articles/360032064392-How-do-I-create-a-Wyze-account πŸ”— Proof 2FA enabled by default since 2022; signup requires 10+ characters with upper, lower and special characters.
Brute-force protection Exist https://support.wyze.com/hc/en-us/articles/360024402052-Two-Factor-Authentication πŸ”— Proof Official docs are silent, but users report a 'Too many attempts... 15 minutes' lockout, indicating basic rate limiting.
Event logging Partial logging https://forums.wyze.com/t/updated-02-13-20-data-leak-12-26-2019/79046 πŸ”— Proof New-device sign-in email alerts exist, but no user-facing login history or full audit log was found.
Passwords Require change after setup with complexity requirements πŸ”— Proof Signup requires 10+ chars with upper/lower/special, no sequences or spaces; no periodic forced rotation documented.
Category Score Score: 2 / 3

Technical Specifications

Property Details
Operating System & App N/A (embedded firmware, not publicly disclosed) (Companion App: Wyze app (iOS 14.0+ / Android 7.0+))
Hardware (CPU / GPU) CPU: 1.5 GHz • GPU: N/A
Memory & Storage Memory: 128 Mb • Storage: microSD up to 256 GB (exFAT); AWS cloud storage (Cam Plus)
Power, Battery & Charging Battery: None (no battery; mains powered) • Power: 5V/2A adapter (110-240V input), 1.8 m micro-USB cable • Charging: N/A (no battery)
Display & Camera Display: None • Camera: 1920x1080 (1080p), 1/2.9 CMOS, 120Β° FOV, 8x digital zoom, 4x 850nm IR LEDs, H.264, 20/15 fps, color night vision
Sound & Connectivity Sound: Built-in speaker and microphone, 2-way audio, noise and echo cancellation • Connectivity: 2.4 GHz Wi-Fi 802.11 b/g/n (WPA/WPA2), micro-USB power, microSD slot; Alexa/Google Assistant/IFTTT
Physical (Dimensions & Mass) Dimensions: 124 mm (H) x 60 mm (W) x 63 mm (D) • Mass: 320 g (11.29 oz)


Student assignment submission for IoT security assessment.