Wyze Bulb Color WZ017

Classification

Device
Criterion	Value	Proof(s)	Comment
Known hardware tampering	None	[2]	Enclosed design with no public reports of physical tampering vulnerabilities.
Known vulnerabilities	Rare	https://www.wyze.com/support/security-advisories	Occasional low-risk issues fixed by Wyze through firmware updates.
Prior attacks	None	https://www.wyze.com/support/security-advisories	No known large-scale attacks targeting this device.
Updatability	Very common	[3]	Supports automatic updates via the Wyze App; manual updates also available.
Category score	2

System
Criterion	Value	Proof(s)	Comment
Authentication with other systems	Full	https://www.wyze.com/integrations	Integrates with major voice assistants via Wyze App plugins.
Communications	Encrypted with up-to-date encryption	https://www.wyze.com/security	Data transmission between the bulb and Wyze servers uses encryption.
Storage	Encrypted with up-to-date encryption	[4]	Stores basic settings locally (e.g., color preferences); no user data stored on the device.
Category score	1

User Authentication
Criterion	Value	Proof(s)	Comment
Account management	Basic	[5]	Managed via Wyze Account with basic registration and device binding.
Authentication	Secure	[6]	Uses account password and device-specific pairing codes for setup.
Brute-force protection	Basic	[7]	Limits failed login attempts on the Wyze Account.
Event logging	Partial logging	[8]	Logs power on/off and color change events in the Wyze App.
Passwords	Require change after setup with complexity requirements	[9]	Wyze Account password must include uppercase/lowercase letters, numbers, and symbols.
Category score	2

Grade	A-