Xiaomi Mi Bunny Watch 3

From Wiki-IoT



Xiaomi Mi Bunny Watch 3
Security Grade
   
     F
   
Calculator v1
Xiaomi Mi Bunny Watch 3
   Brand: Xiaomi (Parent: Xiaomi Corporation)
   Category: Children Smart Watch • Model / Gen: 3rd Generation MTSB06XUN
   Release Date: 2019-07-15 • Status: In sale
   Classification Date: 2026-10-27 • Official Website

Security Evaluation

1. Device Security

Criterion Value Proof Comment
Known hardware tampering Rare 🔗 Proof Hardware modification is rare
Known vulnerabilities Very common 🔗 Proof Multiple critical vulnerabilities
Prior attacks Very common 🔗 Proof Attacks to steal location and child data
Updatability Rare 🔗 Proof Almost no firmware updates after release
Category Score Score: 3 / 3

2. System Security

Criterion Value Proof Comment
Authentication with other systems No 🔗 Proof Weak or missing authentication
Communications No encryption 🔗 Proof Network traffic unencrypted
Storage No encryption 🔗 Proof Location and chat data stored unencrypted
Category Score Score: 3 / 3

3. User Authentication

Criterion Value Proof Comment
Account management Basic 🔗 Proof Basic account management with flaws
Authentication Absent 🔗 Proof Weak authentication bypass
Brute-force protection Basic 🔗 Proof No login attempt limiting
Event logging Partial logging 🔗 Proof No access audit logs
Passwords Require change after setup 🔗 Proof Simple passwords allowed
Category Score Score: 3 / 3

Technical Specifications

Property Details
Operating System & App Custom embedded OS (Companion App: Mi Home)
Hardware (CPU / GPU) CPU: Spreadtrum SC9832E • GPU: N/A
Memory & Storage Memory: 512 MB RAM • Storage: 4 GB flash
Power, Battery & Charging Battery: 600 mAh lithium battery • Power: 3.7V • Charging: Magnetic charging
Display & Camera Display: 1.4 inch touch LCD • Camera: 2MP front camera
Sound & Connectivity Sound: Microphone and speaker • Connectivity: 4G LTE, Wi‑Fi, Bluetooth
Physical (Dimensions & Mass) Dimensions: Height:41 mm / Width:41 mm / Thickness:14 mm • Mass: 37 g


Xiaomi Mi Bunny Watch 3 is a children smart watch IoT device. It suffers from severe security weaknesses: unencrypted communications and local storage, missing strong authentication, almost no firmware updates. Multiple real-world attacks targeting children’s location and personal data.