| AXIS M3086-V
|
|
Security Grade
Calculator v
|
AXIS M3086-V Network Camera
Release Date: 2022-08-31 • Status: In sale
|
Security Evaluation
1. Device Security
| Criterion
|
Value
|
Proof
|
Comment
|
| Known hardware tampering
|
Rare
|
🔗 Proof
|
Physical reset/removable SD expose a physical-access risk. Qualitative judgment, not measured attack frequency.
|
| Known vulnerabilities
|
Rare
|
🔗 Proof
|
CVE-2025-0324: AXIS OS 11.8-12.2 privilege escalation; fixed 12.3.33/11.11.140. Historical issue, not a claim patched devices remain vulnerable.
|
| Prior attacks
|
None
|
🔗 Proof
|
No model-specific incident established in reviewed sources. Vendor reports no known exploitation of this CVE at publication; NOT proof of no other attacks. Unknown globally.
|
| Updatability
|
Very common
|
🔗 Proof
|
Official active/LTS firmware downloads and security fixes. Rates update availability, not installed patch level.
|
| Category Score
|
Score: 2 / 3
|
2. System Security
| Criterion
|
Value
|
Proof
|
Comment
|
| Authentication with other systems
|
Partial
|
🔗 Proof
|
802.1X EAP-TLS/device certificates supported; integrations require configuration. Not universal mutual authentication.
|
| Communications
|
Encrypted with up-to-date encryption
|
🔗 Proof
|
TLS 1.2/1.3 HTTPS supported. Capability rating for HTTPS-only configuration; plaintext services can be enabled.
|
| Storage
|
Encrypted with up-to-date encryption
|
🔗 Proof
|
AES-XTS-Plain64 256-bit SD encryption supported WHEN ENABLED. Not all storage/remote NAS encrypted by default.
|
| Category Score
|
Score: 2 / 3
|
3. User Authentication
| Criterion
|
Value
|
Proof
|
Comment
|
| Account management
|
Full
|
🔗 Proof
|
Separate Administrator/Operator/Viewer roles; add/update/remove local accounts.
|
| Authentication
|
Basic
|
🔗 Proof
|
First-use account/password required, no default account. Local username/password; local MFA not established.
|
| Brute-force protection
|
Exist
|
🔗 Proof
|
Brute-force delay protection available since 7.30; default enabled since 11.5. Check older firmware settings.
|
| Event logging
|
Access event logged
|
🔗 Proof
|
Access-log capability; Axis recommends enabling and forwarding to syslog. Not asserted enabled by default.
|
| Passwords
|
Require change after setup
|
🔗 Proof
|
Closest option: CREATE initial password, not forced post-setup rotation. Axis imposes no password policy; complexity recommended only.
|
| Category Score
|
Score: 2 / 3
|
Technical Specifications
| Property
|
Details
|
| Operating System & App
|
AXIS OS (Companion App: )
|
| Hardware (CPU / GPU)
|
CPU: • GPU:
|
| Memory & Storage
|
Memory: • Storage:
|
| Power, Battery & Charging
|
Battery: • Power: • Charging:
|
| Display & Camera
|
Display: • Camera:
|
| Sound & Connectivity
|
Sound: • Connectivity:
|
| Physical (Dimensions & Mass)
|
Dimensions: • Mass:
|
Documentation-only; no hands-on tests. Ratings describe supported/configured capabilities, not every default deployment. Frequency categories are qualitative. Prior-attacks None means no model-specific incident established in reviewed evidence, NOT proof of no attacks. Password choice approximates forced initial password creation; no compulsory complexity/rotation is asserted. Announcement date, not exact first shipment: Official announcement 2022-08-31. Admin-only fields unset.
