(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
| D-Link DCS-8300LH (V2)
|
|
Security Grade
Calculator v
|
D-Link DCS-8300LH (V2)
Category: IP Camera • Model / Gen: V2 DCS-8300LH
Release Date: 2020-01-01 • Status: In sale
|
Security Evaluation
1. Device Security
| Criterion
|
Value
|
Proof
|
Comment
|
| Known hardware tampering
|
Rare
|
—
|
Requires physical access; not a common remote attack vector.
|
| Known vulnerabilities
|
Very common
|
🔗 Proof
|
Suffered from a critical hardcoded backdoor vulnerability that bypasses authentication entirely.
|
| Prior attacks
|
Very common
|
🔗 Proof
|
Frequently targeted by botnets due to critical RCE flaws.
|
| Updatability
|
Rare
|
🔗 Proof
|
Firmware support lifecycle is often short, and legacy devices are quickly abandoned.
|
| Category Score
|
Score: 3 / 3
|
2. System Security
| Criterion
|
Value
|
Proof
|
Comment
|
| Authentication with other systems
|
Partial
|
🔗 Proof
|
Requires mydlink account, but lacks strict enterprise-level OAuth.
|
| Communications
|
Encrypted with up-to-date encryption
|
🔗 Proof
|
Standard TLS used for cloud communication.
|
| Storage
|
Encrypted with up-to-date encryption
|
—
|
Cloud storage is encrypted; local SD card depends on user setup.
|
| Category Score
|
Score: 2 / 3
|
3. User Authentication
| Criterion
|
Value
|
Proof
|
Comment
|
| Account management
|
Basic
|
🔗 Proof
|
Basic mydlink account management.
|
| Authentication
|
Basic
|
—
|
The backdoor (CVE-2024-3273) allowed command execution without authentication.
|
| Brute-force protection
|
Absent
|
—
|
Historically vulnerable to brute-force due to lack of lockout mechanisms.
|
| Event logging
|
Partial logging
|
—
|
Basic motion alerts; lacks deep security audit trails.
|
| Passwords
|
Require change after setup with complexity requirements
|
—
|
App requires password setup, but underlying system had hardcoded backdoors.
|
| Category Score
|
Score: 2 / 3
|
Technical Specifications
| Property
|
Details
|
| Operating System & App
|
Linux (Companion App: mydlink App)
|
| Hardware (CPU / GPU)
|
CPU: • GPU:
|
| Memory & Storage
|
Memory: • Storage: MicroSD (up to 256GB)
|
| Power, Battery & Charging
|
Battery: • Power: • Charging:
|
| Display & Camera
|
Display: • Camera: 1080p FHD
|
| Sound & Connectivity
|
Sound: Two-way audio • Connectivity: Wi-Fi 2.4GHz
|
| Physical (Dimensions & Mass)
|
Dimensions: 3.6 x 2.5 x 2.5 inches • Mass: 200g
|
The D-Link DCS-8300LH (V2) presents a high security risk. It was affected by CVE-2024-3273, a critical vulnerability where hardcoded credentials in the device allowed unauthenticated attackers to execute arbitrary commands. D-Link has a history of short support lifecycles for consumer cameras, meaning many devices remain unpatched in the wild. This makes it a prime target for botnet recruitment and severe privacy violations.
