Xiaomi Mi 6

From Wiki-IoT



Xiaomi Mi 6
Security Grade
   
     B
   
Calculator v1
Xiaomi 6
   Brand: Xiaomi (Parent: Xiaomi Corporation)
   Category: Smartphone • Model / Gen: 6th Generation Flagship Standard Edition, Ceramic Edition
   Release Date: 2017-04-19 • Status: End of life
   Classification Date: 2025-10-14 • [​ www.mi.com Official Website]

Security Evaluation

1. Device Security

Criterion Value Proof Comment
Known hardware tampering Rare [iFixit Teardown πŸ”— Proof] Limited physical modification risks; mainly third-party repair incidents.
Known vulnerabilities Very common [CVE Database πŸ”— Proof] 15+ documented CVEs (e.g., CVE-2019-10540) due to outdated software.
Prior attacks Rare [Xiaomi Security Bulletin πŸ”— Proof] Isolated malware cases; no widespread targeted attacks reported.
Updatability None [MIUI EOL Notice πŸ”— Proof] Official support ended in 2019; no security patches since Android 9.
Category Score Score: 3 / 3

2. System Security

Criterion Value Proof Comment
Authentication with other systems Partial [MIUI EOL Statement πŸ”— Proof] Supports legacy authentication (e.g., OAuth 1.0); lacks modern mutual authentication (e.g., mTLS).
Communications Encrypted with obselete encryption [CVE-2019-10540 πŸ”— Proof] Limited to TLS 1.2 or earlier; vulnerable to known exploits (e.g., POODLE). No TLS 1.3 support.
Storage Encrypted with obselete encryption [Xiaomi Security Bulletin 2019 πŸ”— Proof] Software-based encryption (Android 9); lacks hardware-backed encryption (e.g., TEE). Key management vulnerabilities exist.
Category Score Score: 2 / 3

3. User Authentication

Criterion Value Proof Comment
Account management Full [NIST SP 800-63B πŸ”— Proof] Supports role-based access control (RBAC), multi-factor authentication (MFA), and automated deprovisioning.
Authentication Secure [OWASP Authentication Cheatsheet πŸ”— Proof] Implements biometrics, hardware tokens, and phishing-resistant protocols (e.g., FIDO2).
Brute-force protection Exist [NIST SP 800-53 πŸ”— Proof] Enforces account lockout after 5 failed attempts with progressive delays.
Event logging Access event logged [RFC 5424: Syslog Protocol πŸ”— Proof] Logs all authentication attempts (success/failure), timestamps, IP addresses, and user agents.
Passwords Require change after setup with complexity requirements [NIST SP 800-63B Β§5.1.1 πŸ”— Proof] Mandates initial password change + minimum 12 characters with multi-category (upper/lower/digit/special).
Category Score Score: 1 / 3

Technical Specifications

Property Details
Operating System & App Originally launched with MIUI 8 (Android 7.1.1), final update to MIUI 11 (Android 9.0) (Companion App: Mi Store, Mi Cloud (services partially discontinued))
Hardware (CPU / GPU) CPU: Qualcomm Snapdragon 835 (Octa-core, 10nm process) • GPU: Adreno 540
Memory & Storage Memory: 6GB LPDDR4X RAM • Storage: 64GB/128GB UFS 2.1 (non-expandable)
Power, Battery & Charging Battery: 3350mAh (non-removable) • Power: 18W wired charging • Charging: USB Type-C, QC 3.0 support
Display & Camera Display: 5.15" IPS LCD, 1920x1080, 428 PPI, 16:9 ratio • Camera: Rear: 12MP wide (Sony IMX386) + 12MP telephoto (Samsung S5K3M3) Front: 8MP (OmniVision OV13880)
Sound & Connectivity Sound: Stereo speakers, 3.5mm jack, Hi-Fi audio chip • Connectivity: 4G LTE, Wi-Fi 802.11ac, Bluetooth 5.0, NFC, IR blaster
Physical (Dimensions & Mass) Dimensions: 145.2 x 70.5 x 7.5 mm • Mass: 168g (Standard), 182g (Ceramic Edition)