Samsung SmartThings Hub (3rd Generation)
From Wiki-IoT
Revision as of 17:08, 16 October 2025 by Jeandecian (talk | contribs)
(diff) ← Older revision | Approved revision (diff) | Latest revision (diff) | Newer revision → (diff)
| Samsung SmartThings Hub (3rd Generation) | ||
|---|---|---|
|
Security Grade
Calculator v1
|
Samsung SmartThings Hub (3rd Generation)
Brand: Samsung (Parent: Samsung Electronics Co., Ltd.) Category: Smart-home gateway (Zigbee 3.0, Z-Wave Plus, Wi-Fi, BLE) • Model / Gen: 3rd gen GP-U999SJVLGDA (US), ET-WV525 (EU) Release Date: 2018-08-09 • Status: In sale Classification Date: 2025-10-16 • Official Website | |
Contents
Security Evaluation
1. Device Security
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Known hardware tampering | Rare | 🔗 Proof | UART pins under epoxy; case requires prying |
| Known vulnerabilities | Very common | 🔗 Proof | Remote code execution in UPnP stack (MiWi) patched 2021-09 |
| Prior attacks | Rare | 🔗 Proof | No large-scale botnet recorded |
| Updatability | Very common | 🔗 Proof | Automatic OTA every 4 weeks; forced updates, signed images |
| Category Score | Score: 2 / 3 | ||
2. System Security
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Authentication with other systems | Full | 🔗 Proof | Public REST API, Matter controller, Google/Alexa, open CLI via SmartThings-CLI |
| Communications | Encrypted with up-to-date encryption | 🔗 Proof | TLS 1.3, AES-256-GCM, certificate pinning, mutual auth |
| Storage | Encrypted with up-to-date encryption | 🔗 Proof | eMMC AES-256-XTS, keys in secure enclave (TrustZone) |
| Category Score | Score: 1 / 3 | ||
3. User Authentication
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Account management | Full | 🔗 Proof | Family group, roles, location-based access, device revocation |
| Authentication | Secure | 🔗 Proof | Samsung-account + 2FA (TOTP, WebAuthn, push) |
| Brute-force protection | Exist | 🔗 Proof | Account lock-out & CAPTCHA after 5 failed attempts |
| Event logging | Access event logged | 🔗 Proof | Login/logout, device add/remove, automation runs; 90-day retention, exportable |
| Passwords | Require change after setup | 🔗 Proof | 8-char min, no reused Samsung password, breached-password detection |
| Category Score | Score: 2 / 3 | ||
Technical Specifications
| Property | Details |
|---|---|
| Operating System & App | OpenWrt-based Samsung SmartThings OS (Linux 4.4) (Companion App: SmartThings (iOS/Android) – formerly Samsung Connect) |
| Hardware (CPU / GPU) | CPU: ARM Cortex-A7 @ 720 MHz (NXP i.MX6 UltraLite) • GPU: None |
| Memory & Storage | Memory: 512 MB DDR3L • Storage: 4 GB eMMC (AES-256 encrypted) |
| Power, Battery & Charging | Battery: None (5 V mains) • Power: 5 V ⎓ 2 A via micro-USB • Charging: micro-USB (no battery) |
| Display & Camera | Display: 1 RGB LED ring (status) • Camera: None |
| Sound & Connectivity | Sound: 1 speaker for voice prompts • Connectivity: Wi-Fi 4 (802.11 b/g/n) 2.4 GHz, Zigbee 3.0, Z-Wave Plus, BLE 5.0, Ethernet (optional via USB-C dongle) |
| Physical (Dimensions & Mass) | Dimensions: 127 × 127 × 30 mm (5 × 5 × 1.2 in) • Mass: 226 g (8 oz) |
