Reolink Duo 2 WiFi
From Wiki-IoT
(diff) ← Older revision | Approved revision (diff) | Latest revision (diff) | Newer revision → (diff)
| Reolink Duo 2 WiFi | ||
|---|---|---|
|
Security Grade
Calculator v1
|
Reolink Duo 2 WiFi
Brand: Reolink Category: Security Camera • Model / Gen: 2 Duo 2 WiFi Release Date: 2022-01-01 • Status: In sale Classification Date: 2026-10-21 • [reolink.com/ Official Website] | |
Contents
Security Evaluation
1. Device Security
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Known hardware tampering | Rare | [reolink.com/ 🔗 Proof] | No public mass physical-tampering campaign documented. |
| Known vulnerabilities | Rare | [nvd.nist.gov/vuln/detail/CVE-2024-48644 🔗 Proof] | CVE-2024-48644 (CVSS 5.3): the login component responds differently to valid vs. invalid usernames, enabling remote account enumeration that facilitates targeted brute-force attacks. |
| Prior attacks | None | [reolink.com/ 🔗 Proof] | No known in-the-wild exploitation of this model reported. |
| Updatability | Very common | [reolink.com/ 🔗 Proof] | Firmware is updated via the Reolink App and available from the vendor site. |
| Category Score | Score: 2 / 3 | ||
2. System Security
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Authentication with other systems | Full | [reolink.com/ 🔗 Proof] | Cloud account plus ONVIF/RTSP and NVR integration with per-device credentials. |
| Communications | Encrypted with up-to-date encryption | [reolink.com/ 🔗 Proof] | Cloud and app streams use TLS; RTSP/ONVIF use local credentials. |
| Storage | Encrypted with up-to-date encryption | [reolink.com/ 🔗 Proof] | Recordings stored on microSD/cloud with password-based protection. |
| Category Score | Score: 1 / 3 | ||
3. User Authentication
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Account management | Full | [reolink.com/ 🔗 Proof] | Reolink account with multi-user and device sharing. |
| Authentication | Basic | [nvd.nist.gov/vuln/detail/CVE-2024-48644 🔗 Proof] | Account enumeration weakness (CVE-2024-48644) weakens the login flow. |
| Brute-force protection | Basic | [reolink.com/ 🔗 Proof] | No documented account lockout policy; enumeration aids brute-force. |
| Event logging | Partial logging | [reolink.com/ 🔗 Proof] | Motion/event logs visible in app; authentication events are not exposed as an audit trail. |
| Passwords | Require change after setup with complexity requirements | [reolink.com/ 🔗 Proof] | Device passwords are set at setup; no default shared password. |
| Category Score | Score: 2 / 3 | ||
Technical Specifications
| Property | Details |
|---|---|
| Operating System & App | Embedded firmware (Companion App: Reolink App) |
| Hardware (CPU / GPU) | CPU: Not publicly specified • GPU: N/A |
| Memory & Storage | Memory: Not publicly specified • Storage: microSD + optional cloud/NVR |
| Power, Battery & Charging | Battery: N/A (wired) • Power: DC power adapter • Charging: N/A |
| Display & Camera | Display: N/A • Camera: Dual-lens 4K, 180° panoramic view |
| Sound & Connectivity | Sound: Two-way audio • Connectivity: Wi-Fi 2.4/5 GHz |
| Physical (Dimensions & Mass) | Dimensions: Not publicly specified • Mass: Not publicly specified |
