Yeelight Smart Bath Heater Pro (YL-FB01)
From Wiki-IoT
| Yeelight Smart Bath Heater Pro (YL-FB01) | ||
|---|---|---|
|
Security Grade
Calculator v1
|
Yeelight Smart Bath Heater Pro (YL-FB01)
Brand: Yeelight (Parent: Yeelight Technology Co., Ltd. (subsidiary of Xiaomi)) Category: Smart Bathroom Heater • Model / Gen: 1st Generation YL-FB01 Release Date: 2022-10-20 • Status: In sale Classification Date: 2026-10-25 • Official Website | |
Contents
Security Evaluation
1. Device Security
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Known hardware tampering | None | 🔗 Proof | Ceiling-mounted sealed unit; physical disassembly requires tools and provides no access to user credentials. |
| Known vulnerabilities | None | 🔗 Proof | No CVE entries have been assigned to this specific bathroom heater model. |
| Prior attacks | None | 🔗 Proof | No publicly reported attack incidents targeting this device category. |
| Updatability | Rare | 🔗 Proof | Firmware updates are available but infrequent; no automatic update by default. |
| Category Score | Score: 2 / 3 | ||
2. System Security
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Authentication with other systems | Partial | 🔗 Proof | Works with Google Assistant, Amazon Alexa and Apple HomeKit via cloud integration. |
| Communications | Encrypted with up-to-date encryption | 🔗 Proof | Local LAN control and cloud synchronization use TLS 1.2 encryption. |
| Storage | No encryption | 🔗 Proof | Only basic configuration data stored locally on device; no sensitive personal data. |
| Category Score | Score: 2 / 3 | ||
3. User Authentication
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Account management | Basic | 🔗 Proof | Standard Mi Home / Yeelight account system with device sharing. |
| Authentication | Basic | 🔗 Proof | Password-based login; two-factor authentication is optional on Mi Home platform. |
| Brute-force protection | Basic | 🔗 Proof | Cloud platform implements basic login rate limiting. |
| Event logging | Partial logging | 🔗 Proof | Device operation events are logged; detailed access audit logs are not available. |
| Passwords | Require change after setup with complexity requirements | 🔗 Proof | No default device credentials; user account password set during registration. |
| Category Score | Score: 2 / 3 | ||
Technical Specifications
| Property | Details |
|---|---|
| Operating System & App | Proprietary embedded firmware (Companion App: Yeelight App, Mi Home App) |
| Hardware (CPU / GPU) | CPU: ARM Cortex-M3 microcontroller • GPU: None |
| Memory & Storage | Memory: 64KB RAM • Storage: 128KB internal flash |
| Power, Battery & Charging | Battery: None (mains powered only) • Power: 220V AC, 2800W • Charging: N/A |
| Display & Camera | Display: LED status indicators • Camera: None |
| Sound & Connectivity | Sound: No built-in speaker • Connectivity: 2.4GHz Wi-Fi (802.11 b/g/n), Bluetooth 4.2 |
| Physical (Dimensions & Mass) | Dimensions: 30.0 × 30.0 × 18.5 cm • Mass: 4.2 kg |
