Eufy Indoor Cam C120 (T8400X)
From Wiki-IoT
| Eufy Indoor Cam C120 (T8400X) | ||
|---|---|---|
|
Security Grade
Calculator v1
|
Eufy Indoor Cam C120
Brand: Eufy (Parent: Anker Innovations) Category: Camera • Model / Gen: 1st generation (C120, 2020) T8400X Release Date: 2020-06-15 • Status: In sale Classification Date: 2026-10-25 • Official Website | |
Contents
Security Evaluation
1. Device Security
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Known hardware tampering | Rare | https://service.eufy.com/article-description/Introducing-eufy-Indoor-Cam-2K 🔗 Proof | Plastic body with exposed microSD slot and no tamper switch; no public physical-tampering campaign found. |
| Known vulnerabilities | Rare | https://services.nvd.nist.gov/rest/json/cves/2.0?keywordSearch=Eufy&resultsPerPage=50 🔗 Proof | NVD lists CVE-2021-3555, a buffer overflow in the Eufy Indoor 2K camera RTSP server (local attacker). HomeBase 2 CVEs do not apply to this hub-less model; several family-level issues exist. |
| Prior attacks | Rare | https://www.mozillafoundation.org/en/privacynotincluded/eufy-security-cams/ https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json 🔗 Proof | 2021 bug exposed 712 users' feeds; 2022 unencrypted stream/thumbnail issues; no public exploitation campaign; no CISA KEV entry. |
| Updatability | Very common | 🔗 Proof | Supports overnight automatic OTA plus manual firmware check in the eufy app; vendor support article remains active. |
| Category Score | Score: 2 / 3 | ||
2. System Security
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Authentication with other systems | Full | https://service.eufy.com/article-description/Introducing-eufy-Indoor-Cam-2K 🔗 Proof | Supports HomeKit/HomeKit Secure Video, Alexa and Google Assistant, and can record to NAS. |
| Communications | Encrypted with up-to-date encryption | https://www.digitaltrends.com/home/anker-admit-eufy-security-issues/ 🔗 Proof | Vendor states TLS plus AES/RSA end-to-end encryption between app/portal and device; 2022 unencrypted-stream issue was reported and vendor says fixed. |
| Storage | Encrypted with up-to-date encryption | https://www.digitaltrends.com/home/anker-admit-eufy-security-issues/ 🔗 Proof | Vendor states local video is AES-encrypted and cloud transit encrypted; 2022 thumbnails were unencrypted, vendor says fixed; advanced E2E is optional. |
| Category Score | Score: 1 / 3 | ||
3. User Authentication
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Account management | Full | https://service.eufy.com/article-description/Keep-Your-eufy-Account-Safe 🔗 Proof | Account, shared users with owner-granted permissions, 2FA, and new-device login email notices are supported. |
| Authentication | Basic | https://service.eufy.com/article-description/Two-Step-Verification-for-eufy-App 🔗 Proof | Strong 8-20 character password is enforced, but 2FA is optional/opt-in, so authentication remains basic. |
| Brute-force protection | Basic | https://service.eufy.com/article-description/Keep-Your-eufy-Account-Safe 🔗 Proof | No official lockout policy found; login help omits it and third-party guides report temporary lockout after repeated failures. Uncertain. |
| Event logging | Access event logged | https://service.eufy.com/article-description/Introduction-to-New-eufy-App 🔗 Proof | eufy app provides Login History and sends an email notification when a new device logs in. |
| Passwords | Require change after setup with complexity requirements | 🔗 Proof | Registration enforces 8+ chars with upper/lower, number and special char; vendor recommends 3-6 month rotation but does not force it. |
| Category Score | Score: 2 / 3 | ||
Technical Specifications
| Property | Details |
|---|---|
| Operating System & App | N/A (embedded firmware, not publicly disclosed) (Companion App: eufy Security app (iOS/Android)) |
| Hardware (CPU / GPU) | CPU: N/A • GPU: N/A |
| Memory & Storage | Memory: N/A • Storage: microSD up to 128 GB (Class 10); cloud; NAS; HomeKit Secure Video |
| Power, Battery & Charging | Battery: None (must stay plugged in) • Power: 5V/1A USB adapter • Charging: N/A (no battery) |
| Display & Camera | Display: None • Camera: 2304x1296 (2K), 125° FOV, 8x digital zoom, IR night vision, on-device human/pet/crying detection |
| Sound & Connectivity | Sound: Built-in microphone and speaker, 2-way audio • Connectivity: 2.4 GHz Wi-Fi only, micro-USB power, microSD slot; HomeKit/Alexa/Google Assistant |
| Physical (Dimensions & Mass) | Dimensions: 55 x 55 x 104 mm (2.17 x 2.17 x 4.09 in) • Mass: 104 g (0.23 lb) |
Student assignment submission for IoT security assessment.
