| Dragino PS-LB-NA
|
|
Security Grade
Calculator v1
|
Dragino PS-LB-NA LoRaWAN Analog Sensor
Release Date: 2023-07-18 • Status: In sale
|
Security Evaluation
1. Device Security
| Criterion
|
Value
|
Proof
|
Comment
|
| Known hardware tampering
|
Rare
|
🔗 Proof
|
The device has accessible analog wiring and local configuration interfaces. Physical manipulation is possible, although no model-specific tampering incident has been verified.
|
| Known vulnerabilities
|
None
|
🔗 Proof
|
No PS-LB-NA-specific published vulnerability was established in this review. This does not prove that the device is vulnerability-free.
|
| Prior attacks
|
None
|
🔗 Proof
|
No confirmed public attack specifically targeting the PS-LB-NA was established from the reviewed documentation.
|
| Updatability
|
Very common
|
🔗 Proof
|
The manufacturer documents wireless OTA firmware updates and remote configuration support for this device.
|
| Category Score
|
Score: 2 / 3
|
2. System Security
| Criterion
|
Value
|
Proof
|
Comment
|
| Authentication with other systems
|
Full
|
🔗 Proof
|
The device comes with unique LoRaWAN registration keys and supports OTAA activation through a network server.
|
| Communications
|
Encrypted with up-to-date encryption
|
🔗 Proof
|
The device supports LoRaWAN 1.0.3, which uses AES-128-based communication security when correctly configured. BLE configuration security has not been separately verified.
|
| Storage
|
No encryption
|
🔗 Proof
|
The device stores configuration data in embedded memory, but the reviewed documentation does not establish encryption at rest. This rating is provisional.
|
| Category Score
|
Score: 2 / 3
|
3. User Authentication
| Criterion
|
Value
|
Proof
|
Comment
|
| Account management
|
Absent
|
🔗 Proof
|
No local multi-user account system is documented for the sensor node. User account management depends on the external LoRaWAN server.
|
| Authentication
|
Basic
|
🔗 Proof
|
The device uses LoRaWAN activation keys and supports BLE configuration, but the local user-authentication controls are not fully documented.
|
| Brute-force protection
|
Absent
|
🔗 Proof
|
No local user-login lockout or rate-limiting policy is documented. This does not establish that the external network server lacks such protections.
|
| Event logging
|
Partial logging
|
🔗 Proof
|
The device periodically reports sensor readings and status information, but comprehensive user-access security audit logging is not established.
|
| Passwords
|
Default/Common/Easy to guess
|
🔗 Proof
|
The device uses unique LoRaWAN registration keys rather than a documented default user password. This forced-choice value does not prove that weak default credentials exist.
|
| Category Score
|
Score: 3 / 3
|
Technical Specifications
| Property
|
Details
|
| Operating System & App
|
Embedded firmware (Companion App: LoRaWAN Network Server)
|
| Hardware (CPU / GPU)
|
CPU: 48 MHz ARM microcontroller • GPU: None
|
| Memory & Storage
|
Memory: 64 KB • Storage: 256 KB Flash
|
| Power, Battery & Charging
|
Battery: 8500 mAh Li-SOCl2 battery • Power: 2.5–3.6 V DC • Charging: Non-rechargeable
|
| Display & Camera
|
Display: None • Camera: None
|
| Sound & Connectivity
|
Sound: None • Connectivity: LoRaWAN 1.0.3 Class A, Bluetooth 5.1, 0–20mA and 0–30V analog inputs
|
| Physical (Dimensions & Mass)
|
Dimensions: 127 × 66 × 48 mm • Mass: 222 g
|
The Dragino PS-LB-NA is a battery-powered industrial LoRaWAN analog sensor node designed to connect traditional analog sensors to IoT monitoring platforms. It supports 0–20mA current inputs, 0–30V voltage inputs, and switchable power outputs for external sensors.
The device uses a 48 MHz ARM microcontroller, 64 KB RAM, 256 KB Flash memory, Bluetooth 5.1 and LoRaWAN 1.0.3 Class A communication. It also supports remote configuration and wireless OTA firmware updates.
Each unit is supplied with unique LoRaWAN registration keys. LoRaWAN communication provides AES-128-based security when properly configured.
Potential security concerns include physical access to sensor wiring and configuration interfaces, and limited public documentation concerning encryption at rest, local user authentication, login rate limiting, password policies and security audit logging.
Some assessment values are provisional and should not be interpreted as confirmed vulnerabilities.
Sources:
https://wiki.dragino.com/docs/LoRaWAN-End-Node/io-controllers-sensor-nodes/ps-lb-na/
https://www.microclimates.com/shop/dragino-ps-lb-na-lorawan-analog-sensor-59/document/19
