Wyze Cam Pan v3 (WYZECP3)
From Wiki-IoT
| Wyze Cam Pan v3 (WYZECP3) | ||
|---|---|---|
|
Security Grade
Calculator v1
|
Wyze Cam Pan v3
Brand: Wyze (Parent: Wyze Labs, Inc.) Category: Camera • Model / Gen: 3rd generation (Cam Pan v3) WYZECP3 Release Date: 2023-02-01 • Status: In sale Classification Date: 2026-10-25 • Official Website | |
Contents
Security Evaluation
1. Device Security
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Known hardware tampering | Rare | https://nvd.nist.gov/vuln/detail/CVE-2019-9564 π Proof | Exposed microSD/USB and no tamper switch; Bitdefender attacks required local or adjacent access; no public physical-tampering campaign found. |
| Known vulnerabilities | Very common | https://nvd.nist.gov/vuln/detail/CVE-2024-6248 https://services.nvd.nist.gov/rest/json/cves/2.0?keywordSearch=Wyze&resultsPerPage=50 π Proof | Wyze cameras have repeated critical CVE families (auth bypass, cloud auth RCE, Wi-Fi driver RCE). Pan v3 has no model-specific CVE, but shares the Wyze camera platform and cloud service. |
| Prior attacks | Rare | https://www.bleepingcomputer.com/news/security/wyze-camera-glitch-gave-13-000-users-a-peek-into-other-homes/ https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json π Proof | 2019 server leak exposed ~2.4M users; 2024 caching bug showed ~13k users others' thumbnails; both cloud-side, no firmware exploitation campaign; not in CISA KEV. |
| Updatability | Very common | https://support.wyze.com/hc/en-us/articles/360024852172-Release-Notes-Firmware π Proof | Firmware 4.50.16.7064 released 2026-07-15; Wyze continues firmware and app release notes. |
| Category Score | Score: 2 / 3 | ||
2. System Security
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Authentication with other systems | Partial | https://www.wyze.com/products/wyze-cam-pan π Proof | Supports Alexa, Google Assistant and IFTTT; no HomeKit, Matter or enterprise SSO. |
| Communications | Encrypted with up-to-date encryption | https://support.wyze.com/hc/en-us/articles/11795670894875-Wyze-Cam-Pan-v3-Tech-Specs π Proof | Wyze states HTTPS/TLS plus AES-128 for live and playback data; Wi-Fi supports WPA/WPA2. |
| Storage | No encryption | https://forums.wyze.com/t/no-security-for-sd-cards/132474/9 π Proof | Cloud event video uses AES-128, but microSD recordings are plaintext MP4 readable on a PC per user tests and Wyze support. |
| Category Score | Score: 2 / 3 | ||
3. User Authentication
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Account management | Full | https://www.wyze.com/products/wyze-cam-pan π Proof | Account registration, device sharing with owner-only configuration, 2FA, passkeys and third-party sign-in are supported. |
| Authentication | Secure | https://support.wyze.com/hc/en-us/articles/360032064392-How-do-I-create-a-Wyze-account π Proof | 2FA enabled by default since 2022; signup requires 10+ characters with upper, lower and special characters. |
| Brute-force protection | Exist | https://support.wyze.com/hc/en-us/articles/360024402052-Two-Factor-Authentication π Proof | Official docs are silent, but users report a 'Too many attempts... 15 minutes' lockout, indicating basic rate limiting. |
| Event logging | Partial logging | https://forums.wyze.com/t/updated-02-13-20-data-leak-12-26-2019/79046 π Proof | New-device sign-in email alerts exist, but no user-facing login history or full audit log was found. |
| Passwords | Require change after setup with complexity requirements | π Proof | Signup requires 10+ chars with upper/lower/special, no sequences or spaces; no periodic forced rotation documented. |
| Category Score | Score: 2 / 3 | ||
Technical Specifications
| Property | Details |
|---|---|
| Operating System & App | N/A (embedded firmware, not publicly disclosed) (Companion App: Wyze app (iOS 14.0+ / Android 7.0+)) |
| Hardware (CPU / GPU) | CPU: 1.5 GHz • GPU: N/A |
| Memory & Storage | Memory: 128 Mb • Storage: microSD up to 256 GB (exFAT); AWS cloud storage (Cam Plus) |
| Power, Battery & Charging | Battery: None (no battery; mains powered) • Power: 5V/2A adapter (110-240V input), 1.8 m micro-USB cable • Charging: N/A (no battery) |
| Display & Camera | Display: None • Camera: 1920x1080 (1080p), 1/2.9 CMOS, 120Β° FOV, 8x digital zoom, 4x 850nm IR LEDs, H.264, 20/15 fps, color night vision |
| Sound & Connectivity | Sound: Built-in speaker and microphone, 2-way audio, noise and echo cancellation • Connectivity: 2.4 GHz Wi-Fi 802.11 b/g/n (WPA/WPA2), micro-USB power, microSD slot; Alexa/Google Assistant/IFTTT |
| Physical (Dimensions & Mass) | Dimensions: 124 mm (H) x 60 mm (W) x 63 mm (D) • Mass: 320 g (11.29 oz) |
Student assignment submission for IoT security assessment.