AXIS PTZ Network Camera Q6078-E (Q6078-E)

Security Evaluation

1. Device Security

Criterion	Value	Proof	Comment
Known hardware tampering	None	🔗 Proof	No exact-model hardware-tampering report established in reviewed sources; not proof of absence.
Known vulnerabilities	Rare	[https://www.axis.com/dam/public/f1/f0/1e/cve-2025-9524pdf-en-US-504220.pdf https://nvd.nist.gov/vuln/detail/CVE-2025-9524 🔗 Proof]	AXIS OS CVE documented; assessed supported release is patched. Rare is qualitative because WikiIoT gives no threshold.
Prior attacks	None	🔗 Proof	No exact-model botnet/attack evidence established; vendor reported no known exploitation at advisory date.
Updatability	Very common	🔗 Proof	Vendor provides signed releases, checksums, release notes and security fixes.
Category Score	Score: 2 / 3

2. System Security

Criterion	Value	Proof	Comment
Authentication with other systems	Partial	🔗 Proof	EAP-TLS/802.1X supported; mutual authentication depends on configuration and protocol.
Communications	Encrypted with up-to-date encryption	[https://www.axis.com/dam/public/e1/f6/c8/datasheet-axis-q6078-e-ptz-camera-en-US-555514.pdf https://help.axis.com/en-us/axis-os-hardening-guide 🔗 Proof]	HTTPS/HSTS and TLS 1.2/1.3 documented; secure configuration assumed.
Storage	No encryption	🔗 Proof	Internal-flash encryption not established; encrypted removable SD storage is documented.
Category Score	Score: 2 / 3

3. User Authentication

Criterion	Value	Proof	Comment
Account management	Full	🔗 Proof	Role-based accounts can be created, changed and deleted.
Authentication	Basic	[https://help.axis.com/en-us/axis-q6078-e https://www.axis.com/dam/public/e1/f6/c8/datasheet-axis-q6078-e-ptz-camera-en-US-555514.pdf 🔗 Proof]	No default account plus signed OS/secure boot, but physical reset can reset accounts.
Brute-force protection	Exist	🔗 Proof	Configurable brute-force delay; default enabled from AXIS OS 11.5 (manual enable on 8.40).
Event logging	Access event logged	🔗 Proof	User access log and secure syslog are documented.
Passwords	Require change after setup	🔗 Proof	Password is created at first setup; assessed baseline does not enforce complexity.
Category Score	Score: 2 / 3

Technical Specifications

Property	Details
Operating System & App	AXIS OS 12.11.118 (LTS 2026) (Companion App: )
Hardware (CPU / GPU)	CPU: ARTPEC-7 • GPU:
Memory & Storage	Memory: • Storage: Internal flash and removable SD card
Power, Battery & Charging	Battery: • Power: Power over Ethernet (PoE) • Charging:
Display & Camera	Display: • Camera:
Sound & Connectivity	Sound: • Connectivity: Ethernet; HTTPS/TLS; IEEE 802.1X
Physical (Dimensions & Mass)	Dimensions: • Mass:

Assessment baseline: AXIS OS 12.11.118 (LTS 2026). Unknown exact-model tampering/attack history is entered as None per assignment convention and does not prove absence. Release date is a documented announcement/availability proxy. CATS: Device 2, System 2, User Authentication 2; GRAS 6; Grade B.