| Shelly 1 Gen3 (S3SW-001X16EU)
|
|
Security Grade
Calculator v1
|
Shelly 1 Gen3 (S3SW-001X16EU)
Release Date: 2024-05-30 • Status:
|
Security Evaluation
1. Device Security
| Criterion
|
Value
|
Proof
|
Comment
|
| Known hardware tampering
|
None
|
🔗 Proof
|
No model-specific published hardware-tampering incident was found in the reviewed advisories. The wall-box relay and exposed terminals require physical installation security; this is a provisional incident-frequency rating.
|
| Known vulnerabilities
|
Rare
|
🔗 Proof
|
Shelly Gen2+ firmware 2.0.0 fixed an OTA authentication bypass. This is platform-wide evidence; direct exposure of Shelly 1 Gen3 is not established.
|
| Prior attacks
|
None
|
🔗 Proof
|
No Shelly 1 Gen3 attack is documented in the reviewed manufacturer advisory index. Absence of a report does not establish that attacks never occurred.
|
| Updatability
|
Very common
|
🔗 Proof
|
The model-specific web interface guide documents checking and installing firmware; Shelly update policy covers Gen3 devices.
|
| Category Score
|
Score: 2 / 3
|
2. System Security
| Criterion
|
Value
|
Proof
|
Comment
|
| Authentication with other systems
|
Partial
|
🔗 Proof
|
HTTP and WebSocket support SHA-256 digest authentication when enabled. MQTT, UART and outbound WebSocket are outside this mechanism; integration settings matter.
|
| Communications
|
Encrypted with up-to-date encryption
|
🔗 Proof
|
Firmware 2.0+ enforces HTTPS/WSS for the local web server and validates outbound TLS. Rating assumes updated firmware and secure integration settings; optional protocols may differ.
|
| Storage
|
Encrypted with up-to-date encryption
|
🔗 Proof
|
Shelly documents encrypted flash for security assets on newly produced devices. Early Shelly 1 Gen3 units date to 2024 and may not have this protection; score applies only to a newly produced unit.
|
| Category Score
|
Score: 2 / 3
|
3. User Authentication
| Criterion
|
Value
|
Proof
|
Comment
|
| Account management
|
Basic
|
🔗 Proof
|
The local device has a configurable password for a fixed admin identity. Separate local user roles and privilege levels are not documented.
|
| Authentication
|
Secure
|
🔗 Proof
|
When enabled, local HTTP/WebSocket uses RFC 7616 SHA-256 digest. Rating assumes firmware 2.0+ and completed secure setup; some communication channels remain outside it.
|
| Brute-force protection
|
Exist
|
🔗 Proof
|
Firmware 2.0+ provides progressive delays, rate limits and account lockout after repeated failed logins. Older firmware may differ.
|
| Event logging
|
Partial logging
|
🔗 Proof
|
The model-specific web interface offers debug logs, but the reviewed documentation does not establish complete login and access auditing.
|
| Passwords
|
Require change after setup
|
🔗 Proof
|
For firmware 2.0+, Shelly says the admin password must be configured during the 15-minute setup window. No password-complexity requirement is established; this form choice is approximate.
|
| Category Score
|
Score: 2 / 3
|
Technical Specifications
| Property
|
Details
|
| Operating System & App
|
Shelly Gen3 firmware (Companion App: Shelly Smart Control (optional))
|
| Hardware (CPU / GPU)
|
CPU: ESP-Shelly-C38F • GPU:
|
| Memory & Storage
|
Memory: • Storage: 8 MB flash
|
| Power, Battery & Charging
|
Battery: • Power: 110-240 V AC or 24-48 V DC or 12 V DC; <1.2 W; relay 16 A at 240 V AC • Charging:
|
| Display & Camera
|
Display: • Camera:
|
| Sound & Connectivity
|
Sound: • Connectivity: 2.4 GHz Wi-Fi 802.11 b/g/n; Bluetooth 4.2; MQTT
|
| Physical (Dimensions & Mass)
|
Dimensions: 37 x 42 x 16 mm • Mass: 26 g
|
Shelly 1 Gen3 (S3SW-001X16EU) is a Wi-Fi/Bluetooth smart relay with dry contacts for controlling electrical loads. Documentation-based assessment reviewed 23 October 2026; no physical unit was tested. The 30 May 2024 date marks the manufacturer's public unveiling, not a verified retail launch date. Security ratings assume firmware 2.0+ with secure setup and integration settings. Encrypted flash for security assets is documented only for newly produced devices; early 2024 stock may differ. Hardware-tampering and past-attack ratings are provisional because no model-specific incidents were found in the reviewed advisories. A physical wall-box installation requires its own access control.
