Meross Smart Garage Door Opener (MSG100)
From Wiki-IoT
| Meross Smart Garage Door Opener (MSG100) | ||
|---|---|---|
|
Security Grade
Calculator v1
|
Meross Smart Garage Door Opener (MSG100)
Brand: Meross (Parent: Chengdu Meross Technology Co., Ltd.) Category: Smart Garage Door Controller • Model / Gen: 1st Generation MSG100 Release Date: 2021-06-10 • Status: In sale Classification Date: 2026-10-25 • Official Website | |
Contents
Security Evaluation
1. Device Security
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Known hardware tampering | Rare | 🔗 Proof | Simple relay-based design; physical access only allows manual control, no credential extraction from hardware. |
| Known vulnerabilities | Rare | 🔗 Proof | Minor cloud API vulnerabilities reported in 2021 have been patched; no critical on-device vulnerabilities remain. |
| Prior attacks | None | 🔗 Proof | No widely documented real-world exploitation incidents targeting this specific model. |
| Updatability | Very common | 🔗 Proof | Regular OTA firmware updates for stability and security, including HomeKit compatibility patches. |
| Category Score | Score: 2 / 3 | ||
2. System Security
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Authentication with other systems | Full | 🔗 Proof | Works with Apple HomeKit, Amazon Alexa, Google Assistant and SmartThings with standard authentication protocols. |
| Communications | Encrypted with up-to-date encryption | 🔗 Proof | Cloud control uses TLS 1.2 encryption; HomeKit communication uses Apple-standard end-to-end encryption. |
| Storage | No encryption | 🔗 Proof | Only Wi-Fi credentials and basic config stored locally; no large sensitive data set on device. |
| Category Score | Score: 2 / 3 | ||
3. User Authentication
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Account management | Basic | 🔗 Proof | Standard account with device sharing; HomeKit adds separate user permission management. |
| Authentication | Basic | 🔗 Proof | Password-based Meross account login; two-factor authentication is not natively supported. |
| Brute-force protection | Basic | 🔗 Proof | Cloud platform implements basic login attempt rate limiting and temporary lockout. |
| Event logging | Partial logging | 🔗 Proof | Door open/close events are logged; detailed account access audit trail is not available. |
| Passwords | Require change after setup | 🔗 Proof | No default device credentials; user account password created during registration. |
| Category Score | Score: 2 / 3 | ||
Technical Specifications
| Property | Details |
|---|---|
| Operating System & App | Proprietary embedded firmware (Companion App: Meross App, Apple Home) |
| Hardware (CPU / GPU) | CPU: ARM Cortex-M0 microcontroller • GPU: None |
| Memory & Storage | Memory: 64KB RAM • Storage: 128KB internal flash |
| Power, Battery & Charging | Battery: None (wired power only) • Power: 5V 1A DC (USB powered) • Charging: N/A |
| Display & Camera | Display: LED status indicator • Camera: None |
| Sound & Connectivity | Sound: No built-in speaker • Connectivity: 2.4GHz Wi-Fi (802.11 b/g/n) |
| Physical (Dimensions & Mass) | Dimensions: 9.4 × 4.0 × 2.3 cm • Mass: 0.12 kg |
