GoveeLife Water Leak Detector 2 (H5058)
From Wiki-IoT
| GoveeLife Water Leak Detector 2 (H5058) | ||
|---|---|---|
|
Security Grade
Calculator v1
|
GoveeLife Water Leak Detector 2 (H5058)
Brand: Govee (Parent: Shenzhen Govee Technology Co., Ltd.) Category: Smart Water Leak Detector • Model / Gen: 2nd Generation H5058 (sensor), H5043 (gateway) Release Date: 2023-11-15 • Status: In sale Classification Date: 2026-10-25 • Official Website | |
Contents
Security Evaluation
1. Device Security
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Known hardware tampering | None | 🔗 Proof | IP66 sealed enclosure; physical tampering provides no access to sensitive credentials or control functions. |
| Known vulnerabilities | None | 🔗 Proof | No CVE vulnerabilities have been published for this water leak sensor model. |
| Prior attacks | None | 🔗 Proof | No publicly documented real-world attack incidents targeting this device. |
| Updatability | Rare | 🔗 Proof | Gateway firmware can be updated OTA; sensor firmware is rarely updated, only for critical fixes. |
| Category Score | Score: 2 / 3 | ||
2. System Security
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Authentication with other systems | Partial | 🔗 Proof | Integrates with Amazon Alexa, Google Assistant and IFTTT via cloud-to-cloud authentication. |
| Communications | Encrypted with up-to-date encryption | 🔗 Proof | LoRa sensor communication uses AES encryption; gateway cloud connection uses TLS 1.2. |
| Storage | No encryption | 🔗 Proof | Local device stores only basic configuration; no sensitive personal data stored on sensor unit. |
| Category Score | Score: 2 / 3 | ||
3. User Authentication
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Account management | Basic | 🔗 Proof | Single owner account with device sharing; no granular role-based permission system. |
| Authentication | Basic | 🔗 Proof | Password-based app login; native two-factor authentication is not available. |
| Brute-force protection | Basic | 🔗 Proof | Cloud platform implements basic login rate limiting. |
| Event logging | Partial logging | 🔗 Proof | Water leak alarm events and device status changes are logged; full account access audit is not provided. |
| Passwords | Require change after setup | 🔗 Proof | No default device credentials; user sets account password during registration. |
| Category Score | Score: 2 / 3 | ||
Technical Specifications
| Property | Details |
|---|---|
| Operating System & App | Proprietary embedded RTOS (Companion App: Govee Home App) |
| Hardware (CPU / GPU) | CPU: 32-bit ARM Cortex-M0+ microcontroller • GPU: None |
| Memory & Storage | Memory: 32KB RAM • Storage: 64KB internal flash |
| Power, Battery & Charging | Battery: AAA battery, up to 18 months battery life • Power: Battery powered (sensor); USB powered (gateway) • Charging: Disposable battery; no recharge option |
| Display & Camera | Display: LED status indicator • Camera: None |
| Sound & Connectivity | Sound: 100dB built-in alarm buzzer • Connectivity: Sub-GHz LoRa (sensor to gateway), 2.4GHz Wi-Fi (gateway to cloud) |
| Physical (Dimensions & Mass) | Dimensions: 7.2 × 4.2 × 2.0 cm (sensor unit) • Mass: 0.08 kg (per sensor) |
