Withings BPM Connect
From Wiki-IoT
| Withings BPM Connect | ||
|---|---|---|
|
Security Grade
Calculator v1
|
Withings BPM Connect, Wi-Fi Smart Blood Pressure Monitor
Brand: Withings Category: Blood Pressure Monitor • Model / Gen: Connect Release Date: 2019-07-17 • Status: In sale Classification Date: 2022-02-14 • Official Website | |
Contents
Security Evaluation
1. Device Security
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Known hardware tampering | None | 🔗 Proof | no results searching for "withings" in the CVE database |
| Known vulnerabilities | None | https://www.fiercehealthcare.com/tech/hhs-cybersecurity-threat-log4j-attack http://cs.unb.ca/research-expo/expos/2018/submissions/20180403-14-12-rkaur1-at-unb.ca-security_vulnerabilities_in_e-health_devices.pdf 🔗 Proof | The Withings blood pressure device leaks its own identity in URLs, they found: any request from the device to its server, and any response from the server, included its brand. This is sufficient, the paper said, to tell an attacker that someone is using the monitor and how often they're taking their blood pressure. |
| Prior attacks | Very common | 🔗 Proof | |
| Updatability | Very common | 🔗 Proof | update tutorial of the withings blood pressure monitor |
| Category Score | Score: 2 / 3 | ||
2. System Security
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Authentication with other systems | Full | 🔗 Proof | compatible with android and ios smartphones |
| Communications | Encrypted with obselete encryption | — | threat related to the communication with its server, the communication (number of uses, time of the day) can be seen by an attacker. |
| Storage | Encrypted with up-to-date encryption | — | |
| Category Score | Score: 2 / 3 | ||
3. User Authentication
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Account management | Full | 🔗 Proof | with mobile application |
| Authentication | Secure | 🔗 Proof | with mobile application |
| Brute-force protection | Exist | — | no information found. |
| Event logging | Access event logged | 🔗 Proof | communication with a server. |
| Passwords | Require change after setup with complexity requirements | 🔗 Proof | |
| Category Score | Score: 1 / 3 | ||
Technical Specifications
| Property | Details |
|---|---|
| Operating System & App | IOS & Android (Companion App: Health Mate app) |
| Hardware (CPU / GPU) | CPU: • GPU: |
| Memory & Storage | Memory: Up to 8 measurements on-device between synchronizations • Storage: Unlimited storage on Withings cloud |
| Power, Battery & Charging | Battery: 1 Lithium ion batteries required. • Power: Rechargeable battery • Charging: Charge via micro-USB cable Battery life: up to 6 months |
| Display & Camera | Display: LED matrix screen • Camera: none |
| Sound & Connectivity | Sound: none • Connectivity: Bluetooth ; Wi-Fi |
| Physical (Dimensions & Mass) | Dimensions: 5.99cm x 5.48cm x 15.49cm • Mass: 0.36kg |
