Bambu Lab X1 Carbon
From Wiki-IoT
Revision as of 20:45, 24 October 2026 by Jeandecian (talk | contribs)
(diff) ← Older revision | Approved revision (diff) | Latest revision (diff) | Newer revision → (diff)
| Bambu Lab X1 Carbon | ||
|---|---|---|
|
Security Grade
Calculator v1
|
Bambu Lab X1 Carbon
Category: 3D printer • Model / Gen: X1 series (1st generation) X1-Carbon Release Date: 2022-07-01 • Status: In sale Classification Date: 2026-10-22 • Official Website | |
Contents
Security Evaluation
1. Device Security
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Known hardware tampering | Rare | 🔗 Proof | Bambu states JTAG, serial and USB debug ports are disabled at factory and boot stages are encrypted and signed. Physical teardown remains possible, so not None. |
| Known vulnerabilities | Rare | [1] 🔗 Proof | The vendor incident summary lists fixed boot-chain, command-validation and 3MF path-traversal issues. CVE-2025-57521 affects Bambu Studio on the PC, not printer firmware. Public printer-specific CVE count is low. |
| Prior attacks | Rare | 🔗 Proof | Documented abnormal cloud requests, attempts to control already-bound printers and DDoS against MakerWorld. No mass botnet or widespread device compromise reported. |
| Updatability | Very common | 🔗 Proof | OTA updates are signed and encrypted and the vendor has shipped security fixes repeatedly from 2022 to 2025. |
| Category Score | Score: 2 / 3 | ||
2. System Security
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Authentication with other systems | Full | 🔗 Proof | Device binding uses a unique 128-bit device ID and password; cloud and MQTTS connections require authentication. |
| Communications | Encrypted with up-to-date encryption | 🔗 Proof | TLS for cloud and LAN MQTT broker, FTPS for file transfer and WPA2 for Wi-Fi. |
| Storage | Encrypted with obselete encryption | 🔗 Proof | Exported diagnostic logs are AES-encrypted, but local print files on SD or USB are not documented as encrypted. Partial storage protection only. |
| Category Score | Score: 2 / 3 | ||
3. User Authentication
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Account management | Basic | 🔗 Proof | Bambu account with device binding and sharing; no documented role hierarchy or least-privilege sub-accounts. |
| Authentication | Basic | 🔗 Proof | Account password plus device binding. Mandatory 2FA is not documented for all regions. |
| Brute-force protection | Basic | 🔗 Proof | Vendor monitors abnormal login and request rates, but no published per-account failed-login threshold. |
| Event logging | Partial logging | 🔗 Proof | Diagnostic logs and print history exist; no documented administrator-access audit log. |
| Passwords | Require change after setup | 🔗 Proof | No factory default account password; user sets the Bambu account password at signup. Complexity enforcement is not publicly specified. |
| Category Score | Score: 2 / 3 | ||
Technical Specifications
| Property | Details |
|---|---|
| Operating System & App | Bambu Lab proprietary firmware (Linux-based) (Companion App: Bambu Handy / Bambu Studio) |
| Hardware (CPU / GPU) | CPU: Quad-core ARM with 2 TOPS NPU • GPU: Integrated |
| Memory & Storage | Memory: • Storage: Internal storage + microSD card |
| Power, Battery & Charging | Battery: None • Power: 100-240 V AC, 350 W max • Charging: N/A |
| Display & Camera | Display: 5-inch touchscreen • Camera: 1920 x 1080 chamber camera |
| Sound & Connectivity | Sound: • Connectivity: Wi-Fi 2.4/5 GHz, USB, microSD |
| Physical (Dimensions & Mass) | Dimensions: 389 x 389 x 457 mm • Mass: 14.13 kg |
