August Wi-Fi Smart Lock 4th Gen (AUG-SL05)
From Wiki-IoT
Security Evaluation
1. Device Security
2. System Security
3. User Authentication
Technical Specifications
| August Wi-Fi Smart Lock 4th Gen (AUG-SL05) | ||
|---|---|---|
|
Security Grade
Calculator v
|
August Wi-Fi Smart Lock 4th Gen (AUG-SL05)
Brand: August (Parent: ASSA ABLOY) Category: Smart Lock • Model / Gen: 4th AUG-SL05-M01-G01 Release Date: 2020-11-04 • Status: In sale Classification Date: • Official Website | |
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Known hardware tampering | None | 🔗 Proof | Tamper alerts when uninstalled; mounted inside door |
| Known vulnerabilities | None | 🔗 Proof | CVE-2019-17098 hard-coded key; CVE-2018-20100; SweynTooth BLE; all patched |
| Prior attacks | Rare | 🔗 Proof | Not observed in any IoT botnet |
| Updatability | Very common | 🔗 Proof | Firmware pushed automatically over BLE/Wi-F |
| Category Score | Score: 2 / 3 | ||
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Authentication with other systems | Full | 🔗 Proof | Works with HomeKit, Alexa, Google; mutual auth |
| Communications | Encrypted with obselete encryption | 🔗 Proof | AES-128, TLS, rolling-code BLE handshake |
| Storage | Encrypted with up-to-date encryption | 🔗 Proof | Lock state and credentials encrypted on flash |
| Category Score | Score: 2 / 3 | ||
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Account management | Full | 🔗 Proof | Virtual keys, guest schedules, per-user permissions, remote revoke |
| Authentication | Secure | 🔗 Proof | August account + 2FA; BLE rolling codes prevent replay |
| Brute-force protection | Exist | 🔗 Proof | Account lockout after failed attempts; trusted phone verification |
| Event logging | Access event logged | 🔗 Proof | Full lock/unlock history with user and timestamp |
| Passwords | Require change after setup with complexity requirements | 🔗 Proof | August account password complexity enforced |
| Category Score | Score: 1 / 3 | ||
| Property | Details |
|---|---|
| Operating System & App | Embedded RTOS (Companion App: August Home) |
| Hardware (CPU / GPU) | CPU: • GPU: |
| Memory & Storage | Memory: • Storage: |
| Power, Battery & Charging | Battery: 4 x AA batteries (6 months) • Power: Battery powered • Charging: N/A |
| Display & Camera | Display: No display • Camera: No camera |
| Sound & Connectivity | Sound: Audio chirp feedback • Connectivity: Wi-Fi 2.4GHz, Bluetooth 4.2 |
| Physical (Dimensions & Mass) | Dimensions: 3.0 x 2.5 x 2.5 inches • Mass: 0.7 lbs (317 g) |