Aqara M2 Hub

From Wiki-IoT
Revision as of 04:37, 24 October 2026 by 20232873MuNingHe (talk | contribs) (Good security profile, supports local automation to reduce cloud exposure, standard encryption and OTA updates. Has a small number of historical vulnerabilities that were patched. Rating: B.)
(diff) ← Older revision | Latest revision (diff) | Newer revision β†’ (diff)



Aqara M2 Hub
Security Grade
   
     A-
Calculator v
Aqara Smart Hub M2 Multi-protocol Smart Home Gateway
   Category: Smart Home Gateway / IoT Hub • Model / Gen: M2 series gateway HM2-G01

   Release Date: 2020-06-01 • Status: In sale

   Classification Date:  • Official Website

Security Evaluation

1. Device Security

Criterion Value Proof Comment
Known hardware tampering Rare [[1](https://www.aqara.com/en/product/hub-m2) πŸ”— Proof] Hardware modification and custom firmware hacks are uncommon
Known vulnerabilities Rare [[2](https://avd.aliyun.com/detail?id=AVD-2025-65295) πŸ”— Proof] One signed-firmware validation vulnerability patched in later firmware releases
Prior attacks Rare [[3](https://www.aqara.com/en/product/hub-m2) πŸ”— Proof] No widespread mass attacks targeting this gateway
Updatability Very common πŸ”— Proof OTA automatic firmware updates via Aqara Home
Category Score Score: 2 / 3

2. System Security

Criterion Value Proof Comment
Authentication with other systems Partial πŸ”— Proof [n/product/hub-m2](https://www.aqara.com/en/product/hub-m2)Supports Apple HomeKit, Alexa, Google Home, local automation runs offline
Communications Encrypted with up-to-date encryption πŸ”— Proof Zigbee traffic AES‑128 encrypted; cloud remote access over TLS 1.2+
Storage Encrypted with up-to-date encryption πŸ”— Proof Local configuration and cloud user data encrypted at rest
Category Score Score: 2 / 3

3. User Authentication

Criterion Value Proof Comment
Account management Full πŸ”— Proof Full account management, home sharing and permission controls
Authentication Secure πŸ”— Proof Account login supports two-factor authentication (MFA)
Brute-force protection Exist [[4](https://www.aqara.com) πŸ”— Proof] Rate limiting and temporary lockout for repeated failed logins
Event logging Access event logged [[5](https://store-support.aqara.com) πŸ”— Proof] App records hub connection, login, device join and automation events
Passwords Require change after setup with complexity requirements πŸ”— Proof Enforces password complexity rules; no static default credentials
Category Score Score: 1 / 3

Technical Specifications

Property Details
Operating System & App Aqara custom embedded RTOS firmware (Companion App: Aqara Home App)
Hardware (CPU / GPU) CPU: Low-power ARM Cortex embedded SoC • GPU: No dedicated GPU
Memory & Storage Memory: 256 MB RAM • Storage: 256 MB flash storage
Power, Battery & Charging Battery: No built-in battery, 5V USB power supply; optional external battery backup • Power: 5V 1A / 5V 2A Micro-USB input • Charging: Not applicable
Display & Camera Display: No built-in display • Camera: No camera
Sound & Connectivity Sound: Built-in small speaker for alarm / notification chime • Connectivity: Wi‑Fi 2.4 GHz (b/g/n), Zigbee 3.0, Bluetooth 5.0, 360Β° IR transmitter, RJ45 Ethernet port
Physical (Dimensions & Mass) Dimensions: Ξ¦100.5 mm Γ— 30.75 mm • Mass: 95 g


Aqara Hub M2 is a multi-protocol smart home gateway with Zigbee 3.0, Bluetooth, IR blaster and Ethernet. It supports local offline automations, reducing cloud dependency. It received security patches for known firmware flaws. It is HomeKit certified.

Retrieved from "http://fehmijaafar.net/wiki-iot/index.php?title=Aqara_M2_Hub&oldid=9323"