| Dragino SE02-LB — LoRaWAN Soil Moisture & EC Sensor
|
|
Security Grade
Calculator v1
|
Dragino SE02-LB LoRaWAN Soil Moisture & EC Sensor
Release Date: 2024-05-24 • Status: In sale
|
Security Evaluation
1. Device Security
| Criterion
|
Value
|
Proof
|
Comment
|
| Known hardware tampering
|
Rare
|
🔗 Proof
|
The device has a physical enclosure and external sensor probes. Physical manipulation is possible, but no model-specific tampering incident has been established.
|
| Known vulnerabilities
|
None
|
🔗 Proof
|
No SE02-LB-specific published vulnerability was established in this review. This does not prove the absence of vulnerabilities.
|
| Prior attacks
|
None
|
🔗 Proof
|
No confirmed attack specifically targeting the SE02-LB was established in the reviewed materials.
|
| Updatability
|
Very common
|
🔗 Proof
|
The manufacturer explicitly documents support for wireless OTA firmware updates and remote configuration.
|
| Category Score
|
Score: 2 / 3
|
2. System Security
| Criterion
|
Value
|
Proof
|
Comment
|
| Authentication with other systems
|
Full
|
🔗 Proof
|
Each device is supplied with unique LoRaWAN registration keys and supports OTAA activation with a network server.
|
| Communications
|
Encrypted with up-to-date encryption
|
🔗 Proof
|
LoRaWAN 1.0.3 uses AES-128-based security for network communication and application payloads when properly configured.
|
| Storage
|
No encryption
|
🔗 Proof
|
The device supports local data logging, but the reviewed documentation does not establish encryption at rest. The selected value is a conservative assumption, not proof of plaintext storage.
|
| Category Score
|
Score: 2 / 3
|
3. User Authentication
| Criterion
|
Value
|
Proof
|
Comment
|
| Account management
|
Absent
|
🔗 Proof
|
The sensor does not document a local multi-user account interface. User accounts are normally handled by the external LoRaWAN management platform.
|
| Authentication
|
Basic
|
🔗 Proof
|
The device uses unique LoRaWAN registration keys. A separate local user-login mechanism is not documented.
|
| Brute-force protection
|
Absent
|
🔗 Proof
|
No local user-login lockout or rate-limiting mechanism is documented. This does not establish that the deployed network server lacks such protection.
|
| Event logging
|
Partial logging
|
🔗 Proof
|
The device supports sensor data logging, but comprehensive security audit logs for user access have not been verified.
|
| Passwords
|
Default/Common/Easy to guess
|
🔗 Proof
|
The device uses LoRaWAN activation keys instead of a documented default user password. This forced-choice rating does not establish the presence of a weak password.
|
| Category Score
|
Score: 3 / 3
|
Technical Specifications
| Property
|
Details
|
| Operating System & App
|
Embedded firmware (Companion App: LoRaWAN Network Server)
|
| Hardware (CPU / GPU)
|
CPU: Not publicly specified • GPU: None
|
| Memory & Storage
|
Memory: Not publicly specified • Storage: Internal data logging memory; capacity unspecified
|
| Power, Battery & Charging
|
Battery: 8500mAh Li-SOCl2 • Power: 2.5–3.6V DC • Charging: Non-rechargeable battery
|
| Display & Camera
|
Display: None • Camera: None
|
| Sound & Connectivity
|
Sound: None • Connectivity: LoRaWAN 1.0.3 Class A, Bluetooth 5.1
|
| Physical (Dimensions & Mass)
|
Dimensions: 195 × 125 × 55 mm • Mass: 420 g
|
The Dragino SE02-LB is an agricultural IoT sensor designed to monitor soil moisture, soil temperature, and electrical conductivity using two external probes.
The device supports LoRaWAN 1.0.3 Class A, unique registration keys, Bluetooth 5.1 configuration, and wireless OTA firmware updates. These features provide useful security capabilities for remote agricultural monitoring.
However, several security properties are not fully established in public documentation, including local storage encryption, physical tamper resistance, login rate limiting, security audit logging, and password management.
The security assessment considers both the documented LoRaWAN protocol capabilities and the limitations of the available device-specific evidence. Ratings for undocumented controls are provisional and should not be interpreted as confirmed vulnerabilities.
Sources:
https://www.dragino.com/products/agriculture-weather-station/item/335-se02-lb.html
https://manuals.plus/m/9ed7e625beff19e7e759890a325e550ba247b0fde88529374854f23b4ddaa460
