| SwitchBot Hub Mini (W0202200)
|
|
Security Grade
Calculator v1
|
SwitchBot Hub Mini
Release Date: 2016-12-07 • Status:
|
Security Evaluation
1. Device Security
| Criterion
|
Value
|
Proof
|
Comment
|
| Known hardware tampering
|
Rare
|
—
|
No hardware tampering reports found in my search.
|
| Known vulnerabilities
|
Rare
|
🔗 Proof
|
No CVE found for Hub Mini itself; related SwitchBot issues: CVE-2025-53649 (app log leak, fixed in app V9.13) and CVE-2025-64983 (Smart Video Doorbell).
|
| Prior attacks
|
Rare
|
—
|
No attacks on Hub Mini found in my search.
|
| Updatability
|
Very common
|
🔗 Proof
|
SwitchBot fixed CVE-2025-53649 in app V9.13 and publishes security advisories; hub firmware is updated through the app.
|
| Category Score
|
Score: 2 / 3
|
2. System Security
| Criterion
|
Value
|
Proof
|
Comment
|
| Authentication with other systems
|
Partial
|
🔗 Proof
|
Some linked Bluetooth SwitchBot devices can be controlled by anyone nearby unless a password is set.
|
| Communications
|
Encrypted with up-to-date encryption
|
🔗 Proof
|
Some SwitchBot devices use encryption keys provided via the SwitchBot account; cloud protocol details not published.
|
| Storage
|
No encryption
|
—
|
No public documentation of storage encryption found.
|
| Category Score
|
Score: 2 / 3
|
3. User Authentication
| Criterion
|
Value
|
Proof
|
Comment
|
| Account management
|
Full
|
🔗 Proof
|
Account settings in the app include email, password and login-device management.
|
| Authentication
|
Secure
|
🔗 Proof
|
SwitchBot offers two-factor verification (optional).
|
| Brute-force protection
|
Basic
|
—
|
No public documentation found.
|
| Event logging
|
Partial logging
|
🔗 Proof
|
App shows which devices are signed in (Manage Login Devices); no full access log documented.
|
| Passwords
|
Require change after setup
|
—
|
No default device password found; users sign in with their own SwitchBot account password.
|
| Category Score
|
Score: 2 / 3
|
Technical Specifications
| Property
|
Details
|
| Operating System & App
|
Not disclosed (Companion App: SwitchBot)
|
| Hardware (CPU / GPU)
|
CPU: Not disclosed • GPU: Not disclosed
|
| Memory & Storage
|
Memory: Not disclosed • Storage: Not disclosed
|
| Power, Battery & Charging
|
Battery: None • Power: DC 5 V, 1 A (micro-USB) • Charging: N/A
|
| Display & Camera
|
Display: None • Camera: None
|
| Sound & Connectivity
|
Sound: None • Connectivity: 2.4 GHz Wi-Fi, Bluetooth LE 4.2 or higher, infrared
|
| Physical (Dimensions & Mass)
|
Dimensions: 65 × 65 × 20 mm • Mass: 36 g
|
The SwitchBot Hub Mini is a small Wi-Fi/Bluetooth hub with an infrared blaster that connects SwitchBot devices and IR appliances to the cloud. No CVE was found for the hub itself; related SwitchBot products and the mobile app have had published fixes. Positives are optional two-factor verification and login-device management. Weaknesses are limited public documentation on encryption and brute-force protection, and password-less Bluetooth control on some linked devices.
