You do not have permission to edit this page, for the following reasons:
Documentation-based security assessment: eufy Security Smart Lock Touch & Wi-Fi (model T8520, S230). Reviewed 2026-10-24. Documentation-based assessment of a defined eufy Security profile. The lock is set up through the eufy Security app on iOS/Android and bound to a single eufy cloud account; the account uses a password under eufy/Anker complexity policy but optional 2-Step Verification is not enabled in this profile. The default app-to-cloud HTTPS/TLS channel is used; BLE is used only during initial pairing. The lock does not require an eufy HomeBase and this model does not declare native HomeKit/Matter pairing. The built-in rechargeable 10,000 mAh battery powers the device; firmware updates are delivered OTA while the lock is online. These are the explicitly selected conditions of this document assessment, not a claim about factory defaults or an inspected physical unit. Ratings map documented capabilities and the stated configuration to WikiIoT choices. Rare is a qualitative assessment of documented bounded exposure/history, not a measured frequency. Prior attacks is explicitly platform-level history; the cited CVEs concern eufy Indoor Cam 2K and eufy HomeBase 2 research, not a confirmed victim record for model T8520, and do not cover the smart lock firmware directly. Optional capabilities (e.g. 2FA, third-party HomeKit pairing) are not treated as enabled unless the assessment configuration states so. Historical CVEs do not imply that the selected current firmware remains vulnerable. Release-date scope: 2021-02-07, the date stated in the body of the official eufy Community launch announcement; Best Buy first retail was 2021-02-14. Not asserted to be the earliest worldwide retail date. Historical vulnerability: CVE-2021-3555 (pre-authentication buffer overflow in the RTSP server on eufy Indoor Cam 2K, firmware 2.0.9.3 and prior; the vulnerable RTSP method is disabled by default). CVE-2022-21806 (use-after-free in mips_collector appsrv_server on eufy HomeBase 2 firmware 2.1.8.5h, remote code execution). Both are eufy camera/HomeBase platform-level research findings disclosed by Bitdefender/Talos, not model-specific CVEs for T8520; eufy has shipped mitigations and automatic updates for the affected platforms. No physical device was tested. Keep the configuration and evidence scope with the ratings. References: [https://us.eufy.com/products/t8520 eufy US — Smart Lock S230 (T8520) product page] [https://community.security.eufy.com/t/smart-lock-touch-now-with-wi-fi/833930 eufy Community — Smart Lock Touch Now with Wi-Fi, 2021-02-07] [https://service.eufy.com/article-description/Introducing-eufy-Smart-Lock-Touch-Wifi?ref=Home_Page eufy Support — Introducing eufy Smart Lock Touch & Wi-Fi] [https://service.eufy.com/article-description/How-to-Charge-eufy-Smart-Lock?ref=Home_Page eufy Support — T8520 uses 10,000 mAh rechargeable battery] [https://www.newegg.com/eufy-security-smart-lock-touch-wi-fi-t8520-wifi/p/35F-005A-00068 Newegg — eufy T8520 retail spec sheet] [https://www.eufy.com/au/products/wi-fi-smart-lock eufy AU — eufy Wi-Fi smart lock line] [https://nvd.nist.gov/vuln/detail/CVE-2021-3555 NVD — CVE-2021-3555 eufy Indoor Cam 2K RTSP buffer overflow] [https://www.opencve.io/cve/CVE-2022-21806 OpenCVE — CVE-2022-21806 eufy HomeBase 2 use-after-free] [https://www.bitdefender.com/files/News/CaseStudies/study/416/Bitdefender-PR-Whitepaper-EUFY-creat6162-en-EN.pdf Bitdefender — Vulnerabilities in eufy 2K Indoor Camera] [https://fehmijaafar.net/wiki-iot/index.php/Methodology WikiIoT methodology]
For new submissions, pages will appear blank until approval.
Summary: This is a minor edit Watch this page
Save page Show preview Show changes Cancel
