YI Home Camera 2
From Wiki-IoT
Security Evaluation
1. Device Security
2. System Security
3. User Authentication
Technical Specifications
Student assignment submission for IoT security assessment.
| YI Home Camera 2 | ||
|---|---|---|
|
Security Grade
Calculator v
|
YI Home Camera 2
Brand: YI Technology (Parent: YI Technology) Category: IP Camera • Model / Gen: Home Camera 2 2.1.1_20171024151200 Release Date: 2017-01-01 • Status: End of life Classification Date: • Official Website | |
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Known hardware tampering | Rare | 🔗 Proof | No physical tamper mechanism reported. |
| Known vulnerabilities | Very common | 🔗 Proof | CVE-2026-4475 (CVSS 8.8): hard-coded credentials in home/web/ipc; exploit public. |
| Prior attacks | Rare | 🔗 Proof | Exploit publicly disclosed but no confirmed active exploitation in the wild. |
| Updatability | None | 🔗 Proof | Vendor contacted but did not respond; no patch available. |
| Category Score | Score: 3 / 3 | ||
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Authentication with other systems | No | 🔗 Proof | Hard-coded credentials embedded in firmware, bypassing normal auth. |
| Communications | Encrypted with up-to-date encryption | 🔗 Proof | No specific transport encryption vulnerability disclosed for this CVE. |
| Storage | No encryption | 🔗 Proof | Credentials stored in plaintext within the firmware file. |
| Category Score | Score: 3 / 3 | ||
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Account management | Absent | 🔗 Proof | Hard-coded credentials cannot be changed by the user. |
| Authentication | Absent | 🔗 Proof | Attackers on local network can use embedded credentials to access admin functions. |
| Brute-force protection | Absent | 🔗 Proof | Not relevant; credentials are known and embedded, no brute-force needed. |
| Event logging | Absent | 🔗 Proof | No logging mechanism mentioned in advisory. |
| Passwords | Default/Common/Easy to guess | 🔗 Proof | Hard-coded shared username/password in firmware; no rotation possible. |
| Category Score | Score: 3 / 3 | ||
| Property | Details |
|---|---|
| Operating System & App | Proprietary Embedded Linux (Companion App: YI Home App) |
| Hardware (CPU / GPU) | CPU: Unknown (Embedded SoC) • GPU: None |
| Memory & Storage | Memory: Unknown • Storage: Internal Flash |
| Power, Battery & Charging | Battery: None • Power: DC Power Adapter • Charging: None |
| Display & Camera | Display: None • Camera: Built-in IP Camera Lens |
| Sound & Connectivity | Sound: Built-in Microphone and Speaker (Two-way audio) • Connectivity: Wi-Fi (2.4GHz) |
| Physical (Dimensions & Mass) | Dimensions: N/A • Mass: N/A |
Student assignment submission for IoT security assessment.