AXIS P3265-LVE

AXIS P3265-LVE
Security Grade B Calculator v	AXIS P3265-LVE Network Camera Brand: Axis Communications Category: Network camera • Model / Gen: P3265-LVE Release Date: 2022-01-28 • Status: End of sale Classification Date: • Official Website

Security Evaluation

1. Device Security

Criterion	Value	Proof	Comment
Known hardware tampering	Rare	🔗 Proof	Physical reset/removable SD expose a physical-access risk. Qualitative judgment, not measured attack frequency.
Known vulnerabilities	Rare	🔗 Proof	CVE-2025-0324: AXIS OS 11.8-12.2 privilege escalation; fixed 12.3.33/11.11.140. Historical issue, not a claim patched devices remain vulnerable.
Prior attacks	None	🔗 Proof	No model-specific incident established in reviewed sources. Vendor reports no known exploitation of this CVE at publication; NOT proof of no other attacks. Unknown globally.
Updatability	Very common	🔗 Proof	Official active/LTS firmware downloads and security fixes. Rates update availability, not installed patch level.
Category Score	Score: 2 / 3

2. System Security

Criterion	Value	Proof	Comment
Authentication with other systems	Partial	🔗 Proof	802.1X EAP-TLS/device certificates supported; integrations require configuration. Not universal mutual authentication.
Communications	Encrypted with up-to-date encryption	🔗 Proof	TLS 1.2/1.3 HTTPS supported. Capability rating for HTTPS-only configuration; plaintext services can be enabled.
Storage	Encrypted with up-to-date encryption	🔗 Proof	AES-XTS-Plain64 256-bit SD encryption supported WHEN ENABLED. Not all storage/remote NAS encrypted by default.
Category Score	Score: 2 / 3

3. User Authentication

Criterion	Value	Proof	Comment
Account management	Full	🔗 Proof	Separate Administrator/Operator/Viewer roles; add/update/remove local accounts.
Authentication	Basic	🔗 Proof	First-use account/password required, no default account. Local username/password; local MFA not established.
Brute-force protection	Exist	🔗 Proof	Brute-force delay protection available since 7.30; default enabled since 11.5. Check older firmware settings.
Event logging	Access event logged	🔗 Proof	Access-log capability; Axis recommends enabling and forwarding to syslog. Not asserted enabled by default.
Passwords	Require change after setup	🔗 Proof	Closest option: CREATE initial password, not forced post-setup rotation. Axis imposes no password policy; complexity recommended only.
Category Score	Score: 2 / 3

Technical Specifications

Property	Details
Operating System & App	AXIS OS (Companion App: )
Hardware (CPU / GPU)	CPU: • GPU:
Memory & Storage	Memory: • Storage:
Power, Battery & Charging	Battery: • Power: • Charging:
Display & Camera	Display: • Camera:
Sound & Connectivity	Sound: • Connectivity:
Physical (Dimensions & Mass)	Dimensions: • Mass:

Documentation-only; no hands-on tests. Ratings describe supported/configured capabilities, not every default deployment. Frequency categories are qualitative. Prior-attacks None means no model-specific incident established in reviewed evidence, NOT proof of no attacks. Password choice approximates forced initial password creation; no compulsory complexity/rotation is asserted. Announcement date, not exact first shipment: Official announcement 2022-01-28. Admin-only fields unset.