| Lockly Secure Pro (PGS-008)
|
|
Security Grade
Calculator v1
|
Lockly Secure Pro PGS-008
Release Date: 2022-06-11 • Status: In sale
|
Security Evaluation
1. Device Security
| Criterion
|
Value
|
Proof
|
Comment
|
| Known hardware tampering
|
None
|
—
|
|
| Known vulnerabilities
|
Very common
|
🔗 Proof
|
|
| Prior attacks
|
Rare
|
🔗 Proof
|
|
| Updatability
|
None
|
—
|
|
| Category Score
|
Score: 3 / 3
|
2. System Security
| Criterion
|
Value
|
Proof
|
Comment
|
| Authentication with other systems
|
Partial
|
—
|
|
| Communications
|
Encrypted with obselete encryption
|
—
|
|
| Storage
|
No encryption
|
—
|
|
| Category Score
|
Score: 3 / 3
|
3. User Authentication
| Criterion
|
Value
|
Proof
|
Comment
|
| Account management
|
Basic
|
—
|
|
| Authentication
|
Basic
|
🔗 Proof
|
|
| Brute-force protection
|
Absent
|
—
|
|
| Event logging
|
Partial logging
|
—
|
|
| Passwords
|
Default/Common/Easy to guess
|
—
|
|
| Category Score
|
Score: 3 / 3
|
Technical Specifications
| Property
|
Details
|
| Operating System & App
|
Lockly OS (RTOS based) (Companion App: )
|
| Hardware (CPU / GPU)
|
CPU: ARM Cortex-M33 • GPU: None
|
| Memory & Storage
|
Memory: 128 KB RAM • Storage: 1 MB Flash
|
| Power, Battery & Charging
|
Battery: 4 x AA batteries • Power: Battery powered • Charging:
|
| Display & Camera
|
Display: Touchscreen keypad • Camera: None
|
| Sound & Connectivity
|
Sound: None • Connectivity: Wi-Fi, Bluetooth Low Energy
|
| Physical (Dimensions & Mass)
|
Dimensions: • Mass:
|
CVE-2023-32560 is a vulnerability in the Lockly Secure Pro smart lock (CVSS 7.5, High). Researchers showed that the lock does not properly verify Bluetooth pairing requests, which allows an attacker within radio range to replay a previously captured unlock command and open the door without knowing the password. The device also stores user credentials in a reversible form, so a compromise of the device exposes all registered fingerprints and PIN codes. A vulnerable smart lock directly threatens the physical security of the home, so it receives the lowest rating.
