Meross Matter Smart Presence Sensor (MS600)

Security Grade

Calculator v1

   Brand: Meross (Parent: Chengdu Meross Technology Co., Ltd.)

   Category: Smart Sensor • Model / Gen:  MS600

   Release Date: 2024-08-21 • Status: In sale

   Classification Date: 2026-10-25 • Official Website

Security Evaluation

Criterion	Value	Proof	Comment
Known hardware tampering	None	🔗 Proof	No model-specific hardware-tampering history was located. The rear button permits a manual factory reset, but no common physical-modification attack campaign was identified.
Known vulnerabilities	Rare	https://garrettmiller.github.io/meross-mss110-vuln/ 🔗 Proof	Security issues have been documented for other Meross products, but no exact-model CVE for MS600 was located in this review. Vulnerabilities in MSS110 or other products are not attributed directly to MS600.
Prior attacks	None	🔗 Proof	No confirmed real-world attack campaign against the MS600 was located in the reviewed public sources.
Updatability	Very common	https://www.meross.com/en-gc/FAQ/641.html 🔗 Proof	Meross's security policy states that fixes are delivered through OTA updates. The MS600 FAQ also instructs users to install newer firmware for resolved issues.
Category Score	Score: 2 / 3

Criterion	Value	Proof	Comment
Authentication with other systems	Partial	https://www.meross.com/en-gc/FAQ/641.html 🔗 Proof	Matter commissioning and Meross account setup provide authenticated integration with supported ecosystems, but full mutual authentication for every Meross cloud and third-party integration path is not publicly demonstrated.
Communications	Encrypted with obselete encryption	🔗 Proof	The device supports Matter over Wi-Fi and WPA/WPA2, but its specifications also list legacy WEP support. Because obsolete encryption remains supported, a conservative score is selected.
Storage	Encrypted with obselete encryption	https://www.meross.com/en-gc/FAQ/641.html 🔗 Proof	The sensor does not record audio or video and Matter can operate without a Meross cloud account. However, encryption of locally stored network and configuration data is not fully documented, so a conservative score is used.
Category Score	Score: 2 / 3

Criterion	Value	Proof	Comment
Account management	Basic	https://www.meross.com/support/FAQ/462.html 🔗 Proof	Full Meross app functionality requires a user account, while Matter offers a separate local integration path. Basic account and recovery controls exist without comprehensive device-level role administration.
Authentication	Secure	🔗 Proof	Meross supports two-factor authentication with verification and recovery codes, providing stronger account authentication when enabled.
Brute-force protection	Basic	🔗 Proof	Two-factor authentication reduces unauthorized access, but exact password-attempt limits or lockout thresholds are not publicly specified; a conservative score is used.
Event logging	Partial logging	🔗 Proof	The app provides presence and automation logs, but these are sensor events rather than a complete authentication-access history. Therefore the score is Partial logging.
Passwords	Require change after setup	https://www.meross.com/en-gc/FAQ/641.html 🔗 Proof	The Meross app uses a user-created account and the owner's Wi-Fi credentials rather than a published universal default sensor password. Matter can also be commissioned separately.
Category Score	Score: 2 / 3

Property	Details
Operating System & App	Proprietary Meross firmware (Companion App: Meross app (Android/iOS); Matter-compatible smart-home apps)
Hardware (CPU / GPU)	CPU: • GPU:
Memory & Storage	Memory: • Storage:
Power, Battery & Charging	Battery: • Power: USB-C, 5 V DC, 1 A • Charging:
Display & Camera	Display: LED status indicator • Camera: None
Sound & Connectivity	Sound: None • Connectivity: 2.4 GHz Wi-Fi 802.11 b/g/n; Bluetooth for pairing; Matter over Wi-Fi; WEP/WPA/WPA2
Physical (Dimensions & Mass)	Dimensions: 75.4 x 34.7 x 38.4 mm • Mass: