Ezviz CS-CV206 camera
Small indoor network camera. Features:
- powered by micro USB
- WiFi
- micro SD socket
- microphone and speaker
- 1080p
- IR LED and IR cut filter
- locked to proprietary service
There is soldered CR1220 cell on the PCB, probably for the RTC. In my case it was already discharged. There might be a space to solder slightly larger cell.
OpenIPC ezviz page shows that there are multiple different devices under the same name, hard to distinguish without opening.
Full name: CS-21061 REV 1.2.
HK-2015-6 SoC.
dmesg output says that this is actually:
svn_ver: 71400 @ Linux version 3.4.35 (chenjie34@Cpl-Ezviz-General-14-172)
(gcc version 4.8.3 20131202 (prerelease) (Hisilicon_v300) ) #1 Wed Jan 8 10:29:04 CST 2020
CPU: ARM926EJ-S [41069265] revision 5 (ARMv5TEJ), cr=00053177
CPU: VIVT data cache, VIVT instruction cache
Machine: hi3518ev200
WiFi:
wlan: version = SD8801-14.85.36.p104-C3X14C171-GPL-(FP85)-SVN@64969
GD25Q127CSIG QSPI Flash (128 Mbit).
RXD and TXD test points.
After booting some custom shell (Busybox protected shell / psh) is open (help output).
Some interesting logs:
LIBSYS INFO: hwif_getsecinfo devModel [CS-CV206-C0-3B2WFR-Pro] , prodNo[D40029510] Net share is running, ssid = EZVIZ_D40029510, key = EZVIZ_CMXOSA
Camera after reset was working as access point with network name and password listed in log.
Back to reviews / teardowns / repairs list.