Dbell HD+ Wi-Fi Video Doorbell

From Wiki-IoT
Revision as of 09:09, 24 October 2026 by 20232895 (talk | contribs) (GRAS=2+3+3=8, According to the North American Academic scale, we have a grade of D.)

(diff) ← Older revision | Approved revision (diff) | Latest revision (diff) | Newer revision β†’ (diff)



Dbell HD+ Wi-Fi Video Doorbell
Security Grade
   
     D
   
Calculator v1
dbell HD Live Video Doorbell
   Brand: dbell (Parent: dbell inc.)
   Category: Video doorbell • Model / Gen: HD/HD Live DB01/HD Live
   Release Date: 2016-04-01 • Status: End of sale
   Classification Date: 2025-10-17 • Official Website

Security Evaluation

1. Device Security

Criterion Value Proof Comment
Known hardware tampering None πŸ”— Proof Public documented hardware tampering methods are limited, no widely circulated commercial cracking solutions
Known vulnerabilities None πŸ”— Proof Few publicly disclosed known vulnerabilities, all reported issues are patched within 30 days of notification
Prior attacks None πŸ”— Proof No large-scale public in-the-wild attacks targeting this product have been recorded
Updatability Rare πŸ”— Proof Firmware signature verification prevents end-user unsigned custom updates, only signed official updates are permitted
Category Score Score: 2 / 3

2. System Security

Criterion Value Proof Comment
Authentication with other systems No πŸ”— Proof Supports partial account authentication integration with Dbell's native companion app, limited compatibility with third-party smart home ecosystems
Communications Encrypted with up-to-date encryption πŸ”— Proof Network traffic encrypted via TLS 1.2, which is no longer counted as up-to-date under current security standards
Storage No encryption πŸ”— Proof Local recorded videos are encrypted with AES-128, an older encryption standard classified as obsolete for current IoT device requirements
Category Score Score: 3 / 3

3. User Authentication

Criterion Value Proof Comment
Account management Basic πŸ”— Proof Basic user account creation, login and permission configuration features are available, no full admin role separation or multi-tier access control
Authentication Basic πŸ”— Proof Supports PIN code and app password authentication, no biometric authentication support
Brute-force protection Absent πŸ”— Proof Basic temporary lockout protection for repeated failed password attempts, no progressive extended lockout mechanism
Event logging Partial logging πŸ”— Proof Partial access, motion detection and video recording events are logged, no full unalterable audit trail for all device operations
Passwords Default/Common/Easy to guess πŸ”— Proof Default shared pre-set password configured out of the box, no forced complexity enforcement for first-time setup
Category Score Score: 3 / 3

Technical Specifications

Property Details
Operating System & App Embedded (Companion App: dbell HD+)
Hardware (CPU / GPU) CPU: Not disclosed • GPU: Not disclosed
Memory & Storage Memory: Not disclosed • Storage: Not disclosed
Power, Battery & Charging Battery: N/A • Power: 12–24 VAC • Charging: N/A
Display & Camera Display: N/A • Camera: 720p
Sound & Connectivity Sound: N/A • Connectivity: 2.4 GHz Wi-Fi / Ethernet
Physical (Dimensions & Mass) Dimensions: 135Γ—45Γ—28 mm • Mass: 120 g


This is Dbell HD+ Wi-Fi Video Doorbell, a battery-powered smart home IoT doorbell running proprietary RTOS-based firmware, equipped with Ingenic T31X processor and integrated video encoding accelerator. It features local encrypted video storage, 2.4 GHz Wi-Fi connectivity, and supports regular signed official firmware updates pushed through the companion mobile app. It provides TLS 1.2 encrypted network transmission and AES-128 local storage encryption, both of which are classified as obsolete by modern IoT security standards. User authentication is secured via basic app password or PIN, with basic account management, simplified brute-force temporary lockout protection, partial operation event logging, and no mandatory password complexity requirements for initial setup. Public hardware tampering methods are limited, known vulnerabilities are rare and patched timely by the vendor, no further custom firmware upload functionality is allowed for end users.