Motorola moto g stylus 2025 (XT2517-1)

Motorola moto g stylus 2025 (XT2517-1)
Security Grade B Calculator v1	Motorola moto g stylus 2025 Brand: Motorola Category: Smartphone • Model / Gen: 2025 XT2517-1 Release Date: 2025-04-17 • Status: Classification Date: 2026-10-27 • Official Website

Security Evaluation

1. Device Security

Criterion	Value	Proof	Comment
Known hardware tampering	Rare	[https://en-us.support.motorola.com/app/answers/detail/a_id/185268/~/specifications---moto-g-stylus---2025 https://motorolanews.com/creativity-meets-durability-in-the-new-moto-g-stylus-2025/ 🔗 Proof]	An enclosed handset with a removable stylus and accessible interfaces. IP68 and durability tests do not prove a security tamper boundary. Rare/2 is a qualitative partial-resistance mapping.
Known vulnerabilities	Very common	[https://source.android.com/docs/security/bulletin/2025-11-01 https://en-us.support.motorola.com/app/answers/detail/a_id/192534 🔗 Proof]	Android-class vulnerability history plus conditional Motorola component history. CVE-2026-5804 affects phones containing CIT Test Service before SPL 2026-04-05; component presence on this exact SKU was not verified. Very common/3 is a device-type history mapping.
Prior attacks	None	[https://en-us.support.motorola.com/app/software-security-update/g_id/7112/productid/12204/ https://source.android.com/docs/security/bulletin/2025-11-01 🔗 Proof]	Limited manufacturer, Android, NVD and CISA searches on 2026-10-26 found no incident explicitly attributed to this model. None records that search outcome only; unknown incidents remain possible.
Updatability	Rare	[https://en-us.support.motorola.com/app/software-security-update/g_id/7112/productid/12204/ https://motorolanews.com/creativity-meets-durability-in-the-new-moto-g-stylus-2025/ 🔗 Proof]	The official model policy lists at least bi-monthly security maintenance releases and support ending March 2028; regional/carrier exceptions apply. Rare/2 maps non-monthly delivery.
Category Score	Score: 2 / 3

2. System Security

Criterion	Value	Proof	Comment
Authentication with other systems	Partial	[https://developer.android.com/privacy-and-security/security-ssl https://developer.android.com/privacy-and-security/security-config 🔗 Proof]	TLS server identity checking is supported; mutual authentication depends on the application. Partial is a scoped architecture assessment, not a verified endpoint inventory.
Communications	Encrypted with up-to-date encryption	[https://developer.android.com/about/versions/10/behavior-changes-all https://developer.android.com/privacy-and-security/security-config 🔗 Proof]	Modern platform TLS supports the stated application-traffic profile. This score does not cover every radio protocol or an application that enables plaintext or ignores certificates.
Storage	Encrypted with up-to-date encryption	[https://source.android.com/docs/security/features/encryption/file-based https://motorolanews.com/creativity-meets-durability-in-the-new-moto-g-stylus-2025/ https://en-us.support.motorola.com/app/software-security-update/g_id/7112/productid/12204/ 🔗 Proof]	Android requires FBE for devices launched with Android 10+. Applied here as a stock-platform compliance inference for internal user data; no flash extraction was performed.
Category Score	Score: 2 / 3

3. User Authentication

Criterion	Value	Proof	Comment
Account management	Basic	[https://support.google.com/android/answer/7664951?hl=en https://en-us.support.motorola.com/app/answers/detail/a_id/182457/p/30,669,80, 🔗 Proof]	Service accounts can be added and removed. Basic assesses the personal-owner profile; full local role-based administration and enterprise policy are not assumed.
Authentication	Basic	[https://support.google.com/android/answer/9079129?hl=en https://en-us.support.motorola.com/app/answers/detail/a_id/182457/p/30,669,80, 🔗 Proof]	Configured PIN/password screen lock is the assessed control. Basic does not certify the recovery path or every preinstalled component; disabled screen lock falls outside scope.
Brute-force protection	Exist	[https://source.android.com/docs/security/features/authentication/gatekeeper https://en-us.support.motorola.com/app/answers/detail/a_id/182457/p/30,669,80, 🔗 Proof]	Gatekeeper throttles failed screen-lock credential checks. This is platform design evidence, not a measured vendor delay or a claim about online account limits.
Event logging	Partial logging	🔗 Proof	Android maintains bounded diagnostic logs. Partial does not imply persistent, complete access auditing or an enterprise-managed deployment.
Passwords	Default/Common/Easy to guess	🔗 Proof	Provisional taxonomy mapping: personal Android permits user-selected credentials and optional lock removal. No shared factory password is alleged. Neither forced post-setup replacement option fits; score 3 is conservative and requires reviewer acceptance.
Category Score	Score: 2 / 3

Technical Specifications

Property	Details
Operating System & App	Android 15 at launch; Android 16 upgrade documented in official support policy (Companion App: )
Hardware (CPU / GPU)	CPU: • GPU:
Memory & Storage	Memory: • Storage:
Power, Battery & Charging	Battery: • Power: • Charging:
Display & Camera	Display: • Camera:
Sound & Connectivity	Sound: • Connectivity:
Physical (Dimensions & Mass)	Dimensions: • Mass:

Assessment scope Documentation assessment dated 26 October 2026; no physical inspection or exploit test. Profile: supported official manufacturer firmware, available patches installed, locked bootloader and a strong screen-lock credential. Communication assessment covers correctly validated TLS 1.2/1.3 application connections; arbitrary apps, cellular signaling, SMS, Bluetooth and plaintext integrations are outside this boundary. Storage means internal user-data flash, not every read-only partition or removable card. Platform compliance is an inference, not device testing. The calculated grade applies only to this stated profile. Qualitative mappings and the password-policy mismatch are disclosed for reviewer consideration.

Exact model and release evidence 2025-04-17 is the announced US unlocked-product sale date. XT2517-1 appears under moto g stylus - 2025 in the official model table. The March 2025 launch month in the security portal is distinct from US retail availability. Manufacturer release Exact-model / platform evidence.

Scoring interpretation Vector: 2,3,1,2 / 2,1,1 / 2,2,1,2,3. Category ceiling means: 2,2,2; total 6, provisional profile grade B. Labels are qualitative assessor mappings. The password criterion has no exact fit for user-created Android credentials; score 3 does not allege a shared factory password. If this mapping is rejected, treat the total as unresolved.

Vulnerability and attack scope CVE-2025-48593 is Android platform history, not proof this exact SKU is currently exploitable. Check affected components, installed build and patch level. The limited research found no model-attributed in-the-wild incident; this is not evidence of zero attacks.

Practical risk and improvements Handwritten notes, photos and shared files may be sensitive. Review application access and protect both local data and backups. Install security updates, retain bootloader protection, configure a strong unique screen credential, enable account MFA, use trusted applications and validated TLS, and protect external backups independently.

Originality WikiIoT product-family searches on 2026-10-26 did not identify this product. Pending or unindexed submissions remain possible.

Methodology WikiIoT methodology. Classification date and calculator version are reserved for administrators.

Manufacturer advisory CVE-2026-5804: Motorola CIT component authentication bypass, fixed at security patch level 2026-04-05 or later. Applicability requires the component and affected build; not an exact-model exploit claim. Official advisory.