SwitchBot Smart Lock Keypad (W2401000)
From Wiki-IoT
Revision as of 00:57, 27 October 2026 by Jeandecian (talk | contribs)
(diff) ← Older revision | Approved revision (diff) | Latest revision (diff) | Newer revision → (diff)
| SwitchBot Smart Lock Keypad (W2401000) | ||
|---|---|---|
|
Security Grade
Calculator v1
|
SwitchBot Smart Lock Keypad
Brand: SwitchBot (Parent: SwitchBot Inc.) Category: Smart Lock Access Keypad • Model / Gen: 1 W2401000 Release Date: 2022-07-01 • Status: In sale Classification Date: 2026-10-26 • Official Website | |
Contents
Security Evaluation
1. Device Security
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Known hardware tampering | Rare | 🔗 Proof | Physical hardware tampering cases are rare. |
| Known vulnerabilities | Rare | 🔗 Proof | Only moderate access control weakness discovered. |
| Prior attacks | Rare | 🔗 Proof | Public attack cases targeting this lock are very few. |
| Updatability | Very common | 🔗 Proof | Regular BLE over-the-air updates are supported. |
| Category Score | Score: 2 / 3 | ||
2. System Security
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Authentication with other systems | Full | 🔗 Proof | Complete mutual authentication with cloud server. |
| Communications | Encrypted with up-to-date encryption | 🔗 Proof | Modern updated encryption protects wireless communication. |
| Storage | Encrypted with up-to-date encryption | 🔗 Proof | Local sensitive lock data is fully encrypted. |
| Category Score | Score: 1 / 3 | ||
3. User Authentication
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Account management | Full | 🔗 Proof | Full-featured user access and permission management. |
| Authentication | Secure | 🔗 Proof | Secure multi-verification authentication system. |
| Brute-force protection | Exist | 🔗 Proof | Automatic lockout against password guessing. |
| Event logging | Access event logged | 🔗 Proof | All access and unlock events are fully logged. |
| Passwords | Require change after setup with complexity requirements | 🔗 Proof | Complex password rules enforced after initial setup. |
| Category Score | Score: 1 / 3 | ||
Technical Specifications
| Property | Details |
|---|---|
| Operating System & App | Custom RTOS (Companion App: SwitchBot) |
| Hardware (CPU / GPU) | CPU: Nordic nRF52840 • GPU: None |
| Memory & Storage | Memory: 64KB • Storage: 512KB Flash |
| Power, Battery & Charging | Battery: CR123A lithium battery • Power: 3 V • Charging: Not rechargeable |
| Display & Camera | Display: LED keypad backlight • Camera: None |
| Sound & Connectivity | Sound: Buzzer alert • Connectivity: Bluetooth Low Energy |
| Physical (Dimensions & Mass) | Dimensions: 75 × 125 mm • Mass: 160g |
IDRS Grade: C. CVE-2026-8374 access control weakness. High impact because it controls physical door entry, but attack complexity is moderate.
