| Wyze Lock Bolt (WLCKG1)
|
|
Security Grade
Calculator v1
|
Wyze Lock Bolt
Release Date: 2023-03-01 • Status: In sale
|
Security Evaluation
1. Device Security
| Criterion
|
Value
|
Proof
|
Comment
|
| Known hardware tampering
|
Rare
|
π Proof
|
Software authentication bypass is the main risk.
|
| Known vulnerabilities
|
Rare
|
π Proof
|
Known Bluetooth authentication bypass flaws.
|
| Prior attacks
|
Rare
|
π Proof
|
No widespread mass attack campaigns.
|
| Updatability
|
Rare
|
π Proof
|
Slow and irregular firmware security updates.
|
| Category Score
|
Score: 2 / 3
|
2. System Security
| Criterion
|
Value
|
Proof
|
Comment
|
| Authentication with other systems
|
Partial
|
π Proof
|
Partial Alexa / Google Home integration.
|
| Communications
|
Encrypted with up-to-date encryption
|
π Proof
|
Bluetooth uses older weaker encryption standards.
|
| Storage
|
No encryption
|
π Proof
|
Local access logs stored without encryption.
|
| Category Score
|
Score: 2 / 3
|
3. User Authentication
| Criterion
|
Value
|
Proof
|
Comment
|
| Account management
|
Basic
|
π Proof
|
Basic Wyze cloud account management.
|
| Authentication
|
Basic
|
π Proof
|
PIN + app authentication; known BLE bypass flaws.
|
| Brute-force protection
|
Basic
|
π Proof
|
Basic rate limiting on PIN attempts.
|
| Event logging
|
Partial logging
|
π Proof
|
Lock/unlock events logged; no full audit trail.
|
| Passwords
|
Require change after setup
|
π Proof
|
Access code required on setup; complexity rules basic.
|
| Category Score
|
Score: 2 / 3
|
Technical Specifications
| Property
|
Details
|
| Operating System & App
|
Wyze embedded firmware (Companion App: Wyze App (iOS / Android))
|
| Hardware (CPU / GPU)
|
CPU: ARM Cortex-M4 MCU • GPU: N/A
|
| Memory & Storage
|
Memory: 256 KB RAM • Storage: 1 MB flash
|
| Power, Battery & Charging
|
Battery: 4 Γ AA batteries, up to 12 months • Power: Battery powered; backup 9V battery • Charging: N/A (battery replacement)
|
| Display & Camera
|
Display: No display; status LED • Camera: N/A
|
| Sound & Connectivity
|
Sound: Built-in speaker for lock feedback • Connectivity: Bluetooth 5.2, Wi-Fi via gateway
|
| Physical (Dimensions & Mass)
|
Dimensions: 131 Γ 69.9 Γ 22.2 mm • Mass: 380 g
|
The Wyze Lock Bolt is an affordable smart door lock with known Bluetooth authentication bypass vulnerabilities. The vendor releases security updates slowly and irregularly. A close-proximity attacker can exploit the BLE flaw to unlock the door, compromising physical home and property security.