Xiaomi Mi Smart Plug (1st Gen)
From Wiki-IoT
Revision as of 13:41, 24 October 2026 by Mianmianchun (talk | contribs) (Created page with "{{Classification |name=Xiaomi Mi Smart Plug (1st Generation) |brand=Xiaomi |parent_company=Xiaomi Inc. |website=https://link.wtturl.cn/?target=https%3A%2F%2Fwww.mi.com%2F&scen...")
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
| Xiaomi Mi Smart Plug (1st Gen) | ||
|---|---|---|
|
Security Grade
Calculator v
|
Xiaomi Mi Smart Plug (1st Generation)
Brand: Xiaomi (Parent: Xiaomi Inc.) Category: Wi-Fi Smart Power Plug • Model / Gen: 1st Generation ZNCZ02CM Release Date: 2015-08-01 • Status: End of sale Classification Date: • Official Website | |
Contents
Security Evaluation
1. Device Security
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Known hardware tampering | Very common | 🔗 Proof | Tuya MCU, firmware extraction methods are publicly available |
| Known vulnerabilities | Very common | 🔗 Proof | Multiple disclosed vulnerabilities for this early Xiaomi smart plug series |
| Prior attacks | Rare | 🔗 Proof | Found in IoT scanning datasets, credential reuse attacks reported |
| Updatability | Rare | 🔗 Proof | This first-generation model stopped receiving security updates long ago |
| Category Score | Score: 3 / 3 | ||
2. System Security
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Authentication with other systems | Partial | 🔗 Proof | Relies on Mi Cloud; local communication security is weak |
| Communications | Encrypted with obselete encryption | 🔗 Proof | Legacy encryption used for local device traffic |
| Storage | No encryption | 🔗 Proof | Local configuration data stored without encryption |
| Category Score | Score: 3 / 3 | ||
3. User Authentication
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Account management | Basic | 🔗 Proof | Basic shared home access, limited permission options |
| Authentication | Basic | 🔗 Proof | Xiaomi account password login, 2FA optional but not enforced for device pairing |
| Brute-force protection | Basic | 🔗 Proof | Simple rate limit, no intelligent abnormal login detection |
| Event logging | Partial logging | 🔗 Proof | Power on/off events logged; no detailed access logs |
| Passwords | Default/Common/Easy to guess | 🔗 Proof | Default device secret keys are widely circulated online |
| Category Score | Score: 3 / 3 | ||
Technical Specifications
| Property | Details |
|---|---|
| Operating System & App | Embedded RTOS (Companion App: Mi Home App) |
| Hardware (CPU / GPU) | CPU: Tuya Wi-Fi MCU • GPU: Not applicable |
| Memory & Storage | Memory: 64 KB RAM • Storage: 512 KB Flash |
| Power, Battery & Charging | Battery: No battery • Power: AC 100–240V mains power • Charging: Not applicable |
| Display & Camera | Display: None • Camera: None |
| Sound & Connectivity | Sound: None • Connectivity: Wi‑Fi 2.4GHz |
| Physical (Dimensions & Mass) | Dimensions: 55 × 55 × 31 mm • Mass: 80 g |
