AXIS Dome Camera (M3085-V)
From Wiki-IoT
Revision as of 02:28, 24 October 2026 by JiangHan (talk | contribs) (IoT device security classification)
Security Evaluation
1. Device Security
2. System Security
3. User Authentication
Technical Specifications
Scope
Documentary assessment checked 2026-10-22, without physical-device testing. Assessed firmware: supported AXIS OS 11.11.220 LTS 2024. Configuration: unique accounts, anonymous access disabled, certificate-validated HTTPS and mutual EAP-TLS, encrypted media transport, unused plaintext services disabled, internal filesystem encryption, removable-storage encryption when used, brute-force protection and access logging enabled. The grade applies to this configured deployment. Newer AXIS OS password-policy and audit-log features are outside scope.
- Release date records a dated public announcement: 2022-08-31 (dated public announcement; exact first shipment unverified).
- Prior-attacks and Rare labels are qualitative research judgments, not measured occurrence rates.
- Unknown optional general/hardware fields remain blank; a blank is not evidence of absence.
- Ambarella CV25 hardware; ARTPEC-8-specific secure-boot advisories are not attributed to this model.
Scoring
Device: ceil((2+2+1+1)/4) = 2. System: ceil((1+1+1)/3) = 1. User Authentication: ceil((1+2+1+1+2)/5) = 2. GRAS = 2+1+2 = 5; grade A-. This is a contributor calculation, not administrator approval.
References
- Official M3085-V product page
- Official M3085-V datasheet
- Official M3085-V user manual
- Official M3085-V software support and release history
- Dated AXIS M3085-V/M3086-V/M3088-V announcement
- AXIS OS hardening guide
- AXIS OS web-interface help (use only features applicable to 11.11)
- AXIS CVE-2023-21413 security advisory
- Axis security advisories registry
- AXIS OS release-notes archive (12.9 password-policy introduction)
- Earlier official datasheet with explicit 56 mm / 101 mm dimensions
- Wiki-IoT methodology