| Amazon Echo Dot (2nd Generation) | ||
|---|---|---|
|
Security Grade
Calculator v
|
Amazon Echo Dot (2nd Generation)
Brand: Amazon (Parent: [[:Category:[Amazon.com](https://Amazon.com), Inc.|[Amazon.com](https://Amazon.com), Inc.]]) Category: Smart speaker • Model / Gen: 2nd RS03QR Release Date: 2016-10-11 • Status: End of life Classification Date: • Official Website | |
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Known hardware tampering | Rare | 🔗 Proof | Hardware modification is possible, widespread tampering cases are rare |
| Known vulnerabilities | Very common | 🔗 Proof | Multiple CVEs about microphone access and insecure local API |
| Prior attacks | Rare | 🔗 Proof | PoC exploits exist, mass exploitation incidents are uncommon |
| Updatability | Rare | 🔗 Proof | End of life, Amazon stopped new security firmware updates |
| Category Score | Score: 3 / 3 | ||
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Authentication with other systems | Full | 🔗 Proof | Fully integrated with Amazon account and Alexa ecosystem |
| Communications | Encrypted with up-to-date encryption | 🔗 Proof | 1. Voice traffic uses TLS for cloud transmission 2. |
| Storage | Encrypted with obselete encryption | 🔗 Proof | Local stored credentials use older encryption algorithms |
| Category Score | Score: 2 / 3 | ||
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Account management | Full | 🔗 Proof | 1. Complete Amazon account management in Alexa app 2. |
| Authentication | Secure | 🔗 Proof | Amazon account login with optional 2FA support |
| Brute-force protection | Exist | 🔗 Proof | Amazon cloud side rate limit blocks brute force attempts |
| Event logging | Access event logged | 🔗 Proof | Voice interaction and access events saved in cloud history |
| Passwords | Require change after setup with complexity requirements | 🔗 Proof | Amazon account enforces password complexity rules |
| Category Score | Score: 1 / 3 | ||
| Property | Details |
|---|---|
| Operating System & App | Amazon Alexa OS (proprietary) (Companion App: Amazon Alexa) |
| Hardware (CPU / GPU) | CPU: Not publicly disclosed • GPU: Not publicly disclosed |
| Memory & Storage | Memory: Not publicly disclosed • Storage: Not publicly disclosed |
| Power, Battery & Charging | Battery: None • Power: DC 15 V power adapter • Charging: Not applicable |
| Display & Camera | Display: None • Camera: None |
| Sound & Connectivity | Sound: Built-in mono speaker, microphone array • Connectivity: Wi‑Fi 802.11 b/g/n, 2.4 GHz, Bluetooth |
| Physical (Dimensions & Mass) | Dimensions: 84 × 84 × 30 mm • Mass: 157 g |
This is an end-of-life smart speaker running Alexa. It has several known vulnerabilities. Cloud communication uses modern TLS, but local storage relies on outdated encryption. It supports Amazon account 2FA and access logging.
