| Dragino DDS75-LB
|
|
Security Grade
Calculator v1
|
Dragino DDS75-LB
Release Date: 2023-09-12 • Status: In sale
|
Security Evaluation
1. Device Security
| Criterion
|
Value
|
Proof
|
Comment
|
| Known hardware tampering
|
Rare
|
🔗 Proof
|
The device supports physical configuration and firmware access through a UART interface. This creates a potential tampering surface, but no confirmed model-specific tampering incident was established.
|
| Known vulnerabilities
|
None
|
🔗 Proof
|
No DDS75-LB-specific published vulnerability was established in the reviewed materials. This does not prove the absence of vulnerabilities.
|
| Prior attacks
|
None
|
🔗 Proof
|
No confirmed attack specifically targeting the DDS75-LB was established in the reviewed documentation.
|
| Updatability
|
Very common
|
🔗 Proof
|
The manufacturer documents wireless OTA firmware updates and updates through the UART TTL interface for bug fixes and new features.
|
| Category Score
|
Score: 2 / 3
|
2. System Security
| Criterion
|
Value
|
Proof
|
Comment
|
| Authentication with other systems
|
Full
|
🔗 Proof
|
The device is supplied with unique LoRaWAN registration keys and supports OTAA activation with a network server.
|
| Communications
|
No encryption
|
🔗 Proof
|
The sensor uses LoRaWAN 1.0.3, which specifies AES-128-based communication security when keys are correctly managed.
|
| Storage
|
No encryption
|
🔗 Proof
|
The device contains local configuration data, but encryption at rest is not established in the reviewed documentation. This rating is provisional.
|
| Category Score
|
Score: 3 / 3
|
3. User Authentication
| Criterion
|
Value
|
Proof
|
Comment
|
| Account management
|
Absent
|
🔗 Proof
|
The sensor does not document local multi-user account management. Accounts are managed through an external LoRaWAN server.
|
| Authentication
|
Basic
|
🔗 Proof
|
The device uses LoRaWAN registration keys, but a separate local user-login mechanism is not established in the reviewed documentation.
|
| Brute-force protection
|
Absent
|
🔗 Proof
|
No device-level login rate limiting or failed-attempt lockout mechanism is documented. The security of the external network server is deployment-dependent.
|
| Event logging
|
Partial logging
|
🔗 Proof
|
The sensor transmits measurement events to a LoRaWAN server, but comprehensive user-access security audit logging has not been established.
|
| Passwords
|
Default/Common/Easy to guess
|
🔗 Proof
|
The device uses LoRaWAN activation keys rather than a documented default user password. This forced-choice value does not establish that weak credentials exist.
|
| Category Score
|
Score: 3 / 3
|
Technical Specifications
| Property
|
Details
|
| Operating System & App
|
Embedded firmware (Companion App: LoRaWAN Network Server)
|
| Hardware (CPU / GPU)
|
CPU: Not publicly specified • GPU: None
|
| Memory & Storage
|
Memory: Not publicly specified • Storage: Embedded configuration memory
|
| Power, Battery & Charging
|
Battery: 8500mAh Li-SOCl2 battery • Power: 2.5–3.6V DC • Charging: Non-rechargeable battery
|
| Display & Camera
|
Display: Status LED • Camera: None
|
| Sound & Connectivity
|
Sound: Ultrasonic measurement transducer • Connectivity: LoRaWAN 1.0.3 Class A, Bluetooth 5.1
|
| Physical (Dimensions & Mass)
|
Dimensions: Not publicly specified (package: 150 × 120 × 55 mm) • Mass: 220 g (listed shipping/package weight)
|
The Dragino DDS75-LB is an industrial IoT ultrasonic distance sensor designed for liquid level measurement, parking management, object detection and smart infrastructure monitoring.
It supports LoRaWAN 1.0.3 Class A, Bluetooth 5.1 configuration, unique LoRaWAN registration keys and wireless OTA firmware updates. Its IP66 enclosure and long-life 8500mAh battery support remote deployments.
LoRaWAN communication provides AES-128-based security when properly configured. The device also supports firmware updates through a UART TTL interface.
Potential security concerns include physical access to configuration interfaces and limited public information about local storage encryption, device-level login protection, password management and security audit logging.
Some assessment values are provisional because the available documentation does not establish every security property.
Sources:
https://dragino.com/products/distance-level-sensor/item/271-dds75-lb-ls.html
https://www.microclimates.com/shop/dragino-lorawan-distance-detection-sensor-ultrasonic-technology-25/document/74
