| Xiaomi Mi Bunny Watch 3
|
|
Security Grade
Calculator v1
|
Xiaomi Mi Bunny Watch 3
Release Date: 2019-07-15 • Status: In sale
|
Security Evaluation
1. Device Security
| Criterion
|
Value
|
Proof
|
Comment
|
| Known hardware tampering
|
Rare
|
🔗 Proof
|
Hardware modification is rare
|
| Known vulnerabilities
|
Very common
|
🔗 Proof
|
Multiple critical vulnerabilities
|
| Prior attacks
|
Very common
|
🔗 Proof
|
Attacks to steal location and child data
|
| Updatability
|
Rare
|
🔗 Proof
|
Almost no firmware updates after release
|
| Category Score
|
Score: 3 / 3
|
2. System Security
| Criterion
|
Value
|
Proof
|
Comment
|
| Authentication with other systems
|
No
|
🔗 Proof
|
Weak or missing authentication
|
| Communications
|
No encryption
|
🔗 Proof
|
Network traffic unencrypted
|
| Storage
|
No encryption
|
🔗 Proof
|
Location and chat data stored unencrypted
|
| Category Score
|
Score: 3 / 3
|
3. User Authentication
| Criterion
|
Value
|
Proof
|
Comment
|
| Account management
|
Basic
|
🔗 Proof
|
Basic account management with flaws
|
| Authentication
|
Absent
|
🔗 Proof
|
Weak authentication bypass
|
| Brute-force protection
|
Basic
|
🔗 Proof
|
No login attempt limiting
|
| Event logging
|
Partial logging
|
🔗 Proof
|
No access audit logs
|
| Passwords
|
Require change after setup
|
🔗 Proof
|
Simple passwords allowed
|
| Category Score
|
Score: 3 / 3
|
Technical Specifications
| Property
|
Details
|
| Operating System & App
|
Custom embedded OS (Companion App: Mi Home)
|
| Hardware (CPU / GPU)
|
CPU: Spreadtrum SC9832E • GPU: N/A
|
| Memory & Storage
|
Memory: 512 MB RAM • Storage: 4 GB flash
|
| Power, Battery & Charging
|
Battery: 600 mAh lithium battery • Power: 3.7V • Charging: Magnetic charging
|
| Display & Camera
|
Display: 1.4 inch touch LCD • Camera: 2MP front camera
|
| Sound & Connectivity
|
Sound: Microphone and speaker • Connectivity: 4G LTE, Wi‑Fi, Bluetooth
|
| Physical (Dimensions & Mass)
|
Dimensions: Height:41 mm / Width:41 mm / Thickness:14 mm • Mass: 37 g
|
Xiaomi Mi Bunny Watch 3 is a children smart watch IoT device. It suffers from severe security weaknesses: unencrypted communications and local storage, missing strong authentication, almost no firmware updates. Multiple real-world attacks targeting children’s location and personal data.