Milesight UG65 LoRaWAN Gateway (UG65-868M)
From Wiki-IoT
| Milesight UG65 LoRaWAN Gateway (UG65-868M) | ||
|---|---|---|
|
Security Grade
Calculator v1
|
Milesight UG65 LoRaWAN Gateway (UG65-868M)
Brand: Milesight (Parent: Xiamen Milesight IoT Co., Ltd.) Category: Industrial LoRaWAN Gateway • Model / Gen: 1st Generation UG65-868M Release Date: 2021-05-11 • Status: In sale Classification Date: 2026-10-27 • Official Website | |
Contents
Security Evaluation
1. Device Security
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Known hardware tampering | None | 🔗 Proof | Industrial-grade sealed enclosure; secure boot prevents modified firmware from running. |
| Known vulnerabilities | Rare | 🔗 Proof | Few historical OpenWrt vulnerabilities have been patched in regular firmware updates. |
| Prior attacks | None | 🔗 Proof | No widely documented real-world attack incidents targeting this specific gateway model. |
| Updatability | Very common | 🔗 Proof | Regular signed firmware updates with security patches; supports automatic and manual update. |
| Category Score | Score: 2 / 3 | ||
2. System Security
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Authentication with other systems | Full | [[1](https://www.milesight-iot.com/lorawan/gateway/ug65/) 🔗 Proof] | Supports standard LoRaWAN 1.0.2 protocol, MQTT, HTTP API, and VPN tunneling with full authentication. |
| Communications | Encrypted with up-to-date encryption | 🔗 Proof | LoRaWAN payloads use AES-128 encryption; backhaul supports TLS 1.3 and IPsec VPN. |
| Storage | Encrypted with up-to-date encryption | 🔗 Proof | Configuration files and credentials stored in encrypted partition on internal flash. |
| Category Score | Score: 1 / 3 | ||
3. User Authentication
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Account management | Full | 🔗 Proof | Role-based access control with multiple user levels and granular permission settings. |
| Authentication | Secure | 🔗 Proof | Supports password authentication, SSH keys, and optional two-factor authentication for admin web UI. |
| Brute-force protection | Exist | 🔗 Proof | Built-in firewall and fail2ban-style brute-force protection for SSH and web login. |
| Event logging | Access event logged | 🔗 Proof | Full system logging, access audit trail, and gateway event history available. |
| Passwords | Require change after setup with complexity requirements | 🔗 Proof | Default admin credentials must be changed on first login with password complexity enforcement. |
| Category Score | Score: 1 / 3 | ||
Technical Specifications
| Property | Details |
|---|---|
| Operating System & App | OpenWrt-based hardened embedded Linux (Companion App: Milesight IoT Cloud, Web UI) |
| Hardware (CPU / GPU) | CPU: ARM Cortex-A7 528MHz processor • GPU: None |
| Memory & Storage | Memory: 256MB DDR3 RAM • Storage: 512MB NAND flash |
| Power, Battery & Charging | Battery: None (mains / PoE powered) • Power: 12V DC or 802.3af PoE • Charging: N/A |
| Display & Camera | Display: LED status indicators • Camera: None |
| Sound & Connectivity | Sound: None • Connectivity: LoRaWAN, 10/100 Ethernet, 2.4GHz Wi-Fi, 4G LTE (optional) |
| Physical (Dimensions & Mass) | Dimensions: 13.0 × 13.0 × 3.0 cm • Mass: 0.55 kg |
