| Roborock S8 Pro Ultra (Q8000)
|
|
Security Grade
Calculator v1
|
Roborock S8 Pro Ultra
Release Date: 2023-01-01 • Status: In sale
|
Security Evaluation
1. Device Security
| Criterion
|
Value
|
Proof
|
Comment
|
| Known hardware tampering
|
Rare
|
🔗 Proof
|
Vendor states physical connections are locked down, software connections open only when needed and temporary connections close automatically, which limits the hardware attack surface.
|
| Known vulnerabilities
|
None
|
🔗 Proof
|
No public CVE entry was found for the S8 Pro Ultra at the time of classification.
|
| Prior attacks
|
None
|
🔗 Proof
|
No public report of botnet recruitment or in-the-wild exploitation of this model.
|
| Updatability
|
Very common
|
🔗 Proof
|
Software is verified and trusted before execution and firmware updates are pushed regularly through the app.
|
| Category Score
|
Score: 2 / 3
|
2. System Security
| Criterion
|
Value
|
Proof
|
Comment
|
| Authentication with other systems
|
Full
|
🔗 Proof
|
The robot is built on a high-security SoC with a tamper-resistant certificate that verifies software authenticity before execution; certificates are strictly verified to prevent man-in-the-middle attacks.
|
| Communications
|
Encrypted with up-to-date encryption
|
🔗 Proof
|
All communication is protected by industry-standard encryption including TLS; identity, certificate and key are unique and follow the EU SOG-IS Crypto Working Group standards.
|
| Storage
|
Encrypted with up-to-date encryption
|
🔗 Proof
|
Obstacle photos are stored on the robot in encrypted form rather than as standard image files, and the cloud acts only as a temporary channel without storing images.
|
| Category Score
|
Score: 1 / 3
|
3. User Authentication
| Criterion
|
Value
|
Proof
|
Comment
|
| Account management
|
Full
|
🔗 Proof
|
The app exposes granular permission switches and follows the data minimization principle.
|
| Authentication
|
Secure
|
🔗 Proof
|
Video call is disabled by default and requires a two-step activation: enabling the option in the app followed by pressing the physical button on the robot, then a gesture password verified by the robot.
|
| Brute-force protection
|
Exist
|
🔗 Proof
|
The two-step activation combined with gesture password verification prevents unauthorized call initiation.
|
| Event logging
|
Access event logged
|
🔗 Proof
|
The app records cleaning history and access events; real-time video streams are cleared immediately after each session.
|
| Passwords
|
Require change after setup with complexity requirements
|
🔗 Proof
|
Remote monitoring requires an additional dedicated password set by the user, and account credentials follow the vendor complexity policy.
|
| Category Score
|
Score: 1 / 3
|
Technical Specifications
| Property
|
Details
|
| Operating System & App
|
Embedded Linux (Companion App: Roborock App)
|
| Hardware (CPU / GPU)
|
CPU: MediaTek Genio 1200 class SoC with on-board NPU • GPU:
|
| Memory & Storage
|
Memory: • Storage: Internal flash for maps; 350 ml dustbin, 200 ml water tank
|
| Power, Battery & Charging
|
Battery: 5200 mAh lithium-ion, up to 180 minutes • Power: Dock 100-240 V AC; robot charging via dock • Charging: Automatic dock charging, auto-empty and self-washing dock
|
| Display & Camera
|
Display: • Camera: No RGB camera; PreciSense LiDAR plus Reactive 3D structured light and infrared obstacle avoidance
|
| Sound & Connectivity
|
Sound: Speaker and microphone for voice assistant and video call • Connectivity: Wi-Fi 802.11 a/b/g/n/ac, Bluetooth
|
| Physical (Dimensions & Mass)
|
Dimensions: Robot approx. 350 x 353 x 96.5 mm; dock approx. 470 x 400 x 520 mm • Mass: approx. 12 kg with dock
|
Overall assessment: No CVE and no public exploitation report were found for this model, and the vendor publishes a detailed Trust Center describing a high-security SoC with a tamper-resistant certificate, TLS-protected communication following EU SOG-IS Crypto Working Group standards, encrypted on-device storage of obstacle photos, and regular OTA updates verified before execution. Privacy-relevant functions are opt-in: video call is disabled by default and requires both an in-app switch and a physical button press plus a gesture password. The main caveat is that most of these claims come from vendor documentation rather than independent testing, so the classification reflects the strength of the documented security posture rather than a verified absence of defects.
