You do not have permission to edit this page, for the following reasons:
== eufy Indoor Cam E30 (T8417121) == {{Classification |name=eufy Indoor Cam E30 |brand=eufy |parent_company=Anker Innovations |website=https://www.eufy.com/products/t8417121 |release_date=2025-05-01 |generation=E30 |model=T8417121 |type=Camera |status=In sale |operating_system=Embedded firmware |companion_app=eufy Security |storage=microSD up to 128 GB; optional eufy Cloud backup |battery=None |power=Plug-in power adapter with USB-C cable |charging=N/A |display=None |camera=4K, 125° diagonal lens, 360° pan-and-tilt coverage, IR and color night vision |sound=Built-in two-way audio |connectivity=2.4 GHz Wi-Fi |device_known_hardware_tampering=Rare |device_known_hardware_tampering_proof=https://www.eufy.com/products/t8417121 |device_known_hardware_tampering_comment=The indoor camera, reset control and microSD slot are physically accessible. |device_known_vulnerabilties=None |device_known_vulnerabilties_proof=https://nvd.nist.gov/vuln/search/results?query=eufy%20Indoor%20Cam%20E30&search_type=all https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=eufy |device_known_vulnerabilties_comment=No exact product CVE or known-exploited entry was found in the reviewed NVD and CISA records as of 2026-10-25. |device_prior_attacks=None |device_prior_attacks_proof=https://nvd.nist.gov/vuln/search/results?query=eufy%20Indoor%20Cam%20E30&search_type=all |device_prior_attacks_comment=No public model-specific exploitation campaign was found. |device_updatability=Very common |device_updatability_proof=https://www.eufy.com/products/t8417121 https://support.eufy.com/s/ |device_updatability_comment=The camera is managed through the eufy Security app and has vendor support for firmware and feature updates. |system_authentication_with_other_systems=Full |system_authentication_with_other_systems_proof=https://www.eufy.com/products/t8417121 |system_authentication_with_other_systems_comment=Supports Apple Home, Amazon Alexa and Google Assistant with account or accessory pairing. |system_communications=Encrypted with up-to-date encryption |system_communications_proof=https://www.eufy.com/products/t8417121 https://www.eufy.com/privacy |system_communications_comment=The supported ecosystem integrations use authenticated encrypted sessions; local recording is kept on the microSD card. |system_storage=Encrypted with obselete encryption |system_storage_proof=https://www.eufy.com/products/t8417121 |system_storage_comment=The microSD recording path is not documented as encrypted at rest. |user_authentication_account_management=Basic |user_authentication_account_management_proof=https://www.eufy.com/products/t8417121 https://www.eufy.com/privacy |user_authentication_account_management_comment=An eufy Security account is used for configuration and notifications; detailed administrator roles are not documented. |user_authentication_authentication=Basic |user_authentication_authentication_proof=https://www.eufy.com/products/t8417121 https://www.eufy.com/privacy |user_authentication_authentication_comment=Access relies on the eufy account and app pairing; device-specific multi-factor authentication is not documented. |user_authentication_brute_force_protection=Basic |user_authentication_brute_force_protection_proof=https://www.eufy.com/privacy https://support.eufy.com/s/ |user_authentication_brute_force_protection_comment=No public lockout or rate-limit policy was found; the rating is conservative. |user_authentication_event_logging=Partial logging |user_authentication_event_logging_proof=https://www.eufy.com/products/t8417121 |user_authentication_event_logging_comment=Motion, person, pet, sound and crying events are recorded, but a complete administrator audit log is not documented. |user_authentication_passwords=Require change after setup with complexity requirements |user_authentication_passwords_proof=https://www.eufy.com/privacy |user_authentication_passwords_comment=Setup uses a user-created eufy account; no shared default device password is documented. |latest_classification_date=2026-10-25 |grade_calculator_version=1 }} == Reolink Argus Track == {{Classification |name=Reolink Argus Track |brand=Reolink |parent_company=Reolink Innovation Limited |website=https://reolink.com/product/argus-track/ |release_date=2024-04-23 |generation=Argus Track |model=Argus Track |type=Camera |status=In sale |dimensions=Ø85 × 84 × 118 mm |mass=476 g including battery |operating_system=Embedded firmware |companion_app=Reolink App and Reolink Client |storage=microSD up to 512 GB; optional Reolink Cloud |battery=4800 mAh rechargeable battery |power=5 V 2 A USB-C charging or 6 W Reolink Solar Panel 2 |charging=USB-C or solar |display=None |camera=4K dual-lens, 6× hybrid zoom, pan 355°, tilt 50°, color and IR night vision |sound=Built-in microphone and speaker; two-way audio and siren |connectivity=2.4/5 GHz Wi-Fi IEEE 802.11 a/b/g/n |device_known_hardware_tampering=Rare |device_known_hardware_tampering_proof=https://reolink.com/product/argus-track/ |device_known_hardware_tampering_comment=The outdoor camera, battery compartment, microSD slot and reset button are physically accessible. |device_known_vulnerabilties=None |device_known_vulnerabilties_proof=https://nvd.nist.gov/vuln/search/results?query=Reolink%20Argus%20Track&search_type=all https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=Reolink |device_known_vulnerabilties_comment=No exact product CVE or known-exploited entry was found in the reviewed NVD and CISA records as of 2026-10-25. |device_prior_attacks=None |device_prior_attacks_proof=https://nvd.nist.gov/vuln/search/results?query=Reolink%20Argus%20Track&search_type=all |device_prior_attacks_comment=No public model-specific exploitation campaign was found. |device_updatability=Very common |device_updatability_proof=https://reolink.com/product/argus-track/ https://support.reolink.com/hc/en-us/ |device_updatability_comment=Reolink provides app, client, firmware and product-specific support channels. |system_authentication_with_other_systems=Partial |system_authentication_with_other_systems_proof=https://reolink.com/product/argus-track/ |system_authentication_with_other_systems_comment=Supports Google Assistant and Alexa integrations, but no HomeKit or Matter path is documented. |system_communications=Encrypted with obselete encryption |system_communications_proof=https://reolink.com/product/argus-track/ |system_communications_comment=The published specification lists WPA/WPA2 rather than WPA3 or a current end-to-end encryption standard. |system_storage=Encrypted with obselete encryption |system_storage_proof=https://reolink.com/product/argus-track/ |system_storage_comment=Recordings are stored on a microSD card and the public specification does not document at-rest encryption. |user_authentication_account_management=Basic |user_authentication_account_management_proof=https://reolink.com/product/argus-track/ https://reolink.com/privacy-policy/ |user_authentication_account_management_comment=A Reolink account is used for app access and notifications; detailed administrator roles are not documented. |user_authentication_authentication=Basic |user_authentication_authentication_proof=https://reolink.com/product/argus-track/ https://reolink.com/privacy-policy/ |user_authentication_authentication_comment=Access uses the Reolink account and app pairing; device-specific multi-factor authentication is not documented. |user_authentication_brute_force_protection=Basic |user_authentication_brute_force_protection_proof=https://support.reolink.com/hc/en-us/ https://reolink.com/privacy-policy/ |user_authentication_brute_force_protection_comment=No public lockout or rate-limit policy was found; the rating is conservative. |user_authentication_event_logging=Partial logging |user_authentication_event_logging_proof=https://reolink.com/product/argus-track/ |user_authentication_event_logging_comment=Motion, person, vehicle and animal events can be reviewed, but a complete administrator audit log is not documented. |user_authentication_passwords=Require change after setup with complexity requirements |user_authentication_passwords_proof=https://reolink.com/privacy-policy/ |user_authentication_passwords_comment=Setup uses a user-created Reolink account; no shared default device password is documented. |latest_classification_date=2026-10-25 |grade_calculator_version=1 }} == Reolink Argus Track == {{Classification |name=Reolink Argus Track |brand=Reolink |parent_company=Reolink Innovation Limited |website=https://reolink.com/product/argus-track/ |release_date=2024-04-23 |generation=Argus Track |model=Argus Track |type=Camera |status=In sale |dimensions=Ø85 × 84 × 118 mm |mass=476 g including battery |operating_system=Embedded firmware |companion_app=Reolink App and Reolink Client |storage=microSD up to 512 GB; optional Reolink Cloud |battery=4800 mAh rechargeable battery |power=5 V 2 A USB-C charging or 6 W Reolink Solar Panel 2 |charging=USB-C or solar |display=None |camera=4K dual-lens, 6× hybrid zoom, pan 355°, tilt 50°, color and IR night vision |sound=Built-in microphone and speaker; two-way audio and siren |connectivity=2.4/5 GHz Wi-Fi IEEE 802.11 a/b/g/n |device_known_hardware_tampering=Rare |device_known_hardware_tampering_proof=https://reolink.com/product/argus-track/ |device_known_hardware_tampering_comment=The outdoor camera, battery compartment, microSD slot and reset button are physically accessible. |device_known_vulnerabilties=None |device_known_vulnerabilties_proof=https://nvd.nist.gov/vuln/search/results?query=Reolink%20Argus%20Track&search_type=all https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=Reolink |device_known_vulnerabilties_comment=No exact product CVE or known-exploited entry was found in the reviewed NVD and CISA records as of 2026-10-25. |device_prior_attacks=None |device_prior_attacks_proof=https://nvd.nist.gov/vuln/search/results?query=Reolink%20Argus%20Track&search_type=all |device_prior_attacks_comment=No public model-specific exploitation campaign was found. |device_updatability=Very common |device_updatability_proof=https://reolink.com/product/argus-track/ https://support.reolink.com/hc/en-us/ |device_updatability_comment=Reolink provides app, client, firmware and product-specific support channels. |system_authentication_with_other_systems=Partial |system_authentication_with_other_systems_proof=https://reolink.com/product/argus-track/ |system_authentication_with_other_systems_comment=Supports Google Assistant and Alexa integrations, but no HomeKit or Matter path is documented. |system_communications=Encrypted with obselete encryption |system_communications_proof=https://reolink.com/product/argus-track/ |system_communications_comment=The published specification lists WPA/WPA2 rather than WPA3 or a current end-to-end encryption standard. |system_storage=Encrypted with obselete encryption |system_storage_proof=https://reolink.com/product/argus-track/ |system_storage_comment=Recordings are stored on a microSD card and the public specification does not document at-rest encryption. |user_authentication_account_management=Basic |user_authentication_account_management_proof=https://reolink.com/product/argus-track/ https://reolink.com/privacy-policy/ |user_authentication_account_management_comment=A Reolink account is used for app access and notifications; detailed administrator roles are not documented. |user_authentication_authentication=Basic |user_authentication_authentication_proof=https://reolink.com/product/argus-track/ https://reolink.com/privacy-policy/ |user_authentication_authentication_comment=Access uses the Reolink account and app pairing; device-specific multi-factor authentication is not documented. |user_authentication_brute_force_protection=Basic |user_authentication_brute_force_protection_proof=https://support.reolink.com/hc/en-us/ https://reolink.com/privacy-policy/ |user_authentication_brute_force_protection_comment=No public lockout or rate-limit policy was found; the rating is conservative. |user_authentication_event_logging=Partial logging |user_authentication_event_logging_proof=https://reolink.com/product/argus-track/ |user_authentication_event_logging_comment=Motion, person, vehicle and animal events can be reviewed, but a complete administrator audit log is not documented. |user_authentication_passwords=Require change after setup with complexity requirements |user_authentication_passwords_proof=https://reolink.com/privacy-policy/ |user_authentication_passwords_comment=Setup uses a user-created Reolink account; no shared default device password is documented. |latest_classification_date=2026-10-25 |grade_calculator_version=1 }} == Roborock Qrevo Curv X (S5X) == {{Classification |name=Roborock Qrevo Curv X |brand=Roborock |parent_company=Beijing Roborock Technology Co., Ltd. |website=https://us.roborock.com/products/roborock-qrevo-curv-x |release_date=2025-09-01 |generation=Qrevo Curv X |model=S5X |type=Vacuum Robot |status=In sale |operating_system=Embedded firmware |companion_app=Roborock App |storage=Dust bag in the dock; no removable user storage documented |battery=Rechargeable internal battery |power=AC-powered charging dock |charging=Dock charging |display=None |camera=None; obstacle sensing uses dedicated sensors rather than a user-facing camera |sound=Not publicly specified |connectivity=2.4 GHz Wi-Fi and Bluetooth |device_known_hardware_tampering=Rare |device_known_hardware_tampering_proof=https://us.roborock.com/products/roborock-qrevo-curv-x |device_known_hardware_tampering_comment=The robot, dust bin, brushes and reset controls are physically accessible to a person with local access. |device_known_vulnerabilties=None |device_known_vulnerabilties_proof=https://nvd.nist.gov/vuln/search/results?query=Roborock%20Qrevo%20Curv%20X&search_type=all https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=Roborock |device_known_vulnerabilties_comment=No exact product CVE or known-exploited entry was found in the reviewed NVD and CISA records as of 2026-10-25. |device_prior_attacks=None |device_prior_attacks_proof=https://nvd.nist.gov/vuln/search/results?query=Roborock%20Qrevo%20Curv%20X&search_type=all |device_prior_attacks_comment=No public model-specific exploitation campaign was found. |device_updatability=Very common |device_updatability_proof=https://us.roborock.com/products/roborock-qrevo-curv-x https://support.roborock.com/ |device_updatability_comment=Roborock provides app-managed firmware updates and product-specific support. |system_authentication_with_other_systems=Partial |system_authentication_with_other_systems_proof=https://us.roborock.com/products/roborock-qrevo-curv-x |system_authentication_with_other_systems_comment=Supports Alexa and Google voice integrations, but no native HomeKit path is documented for this model. |system_communications=Encrypted with obselete encryption |system_communications_proof=https://us.roborock.com/products/roborock-qrevo-curv-x https://us.roborock.com/privacy-policy |system_communications_comment=The product uses app and cloud connectivity, but the public page does not document WPA3 or a current end-to-end design. |system_storage=Encrypted with obselete encryption |system_storage_proof=https://us.roborock.com/products/roborock-qrevo-curv-x |system_storage_comment=Cleaning maps and settings are retained by the app or robot; at-rest encryption is not documented. |user_authentication_account_management=Basic |user_authentication_account_management_proof=https://us.roborock.com/products/roborock-qrevo-curv-x https://us.roborock.com/privacy-policy |user_authentication_account_management_comment=A Roborock account is used for device ownership and automation; detailed administrator roles are not documented. |user_authentication_authentication=Basic |user_authentication_authentication_proof=https://us.roborock.com/products/roborock-qrevo-curv-x https://us.roborock.com/privacy-policy |user_authentication_authentication_comment=Access relies on the Roborock account and app pairing; device-specific multi-factor authentication is not documented. |user_authentication_brute_force_protection=Basic |user_authentication_brute_force_protection_proof=https://support.roborock.com/ https://us.roborock.com/privacy-policy |user_authentication_brute_force_protection_comment=No public lockout or rate-limit policy was found; the rating is conservative. |user_authentication_event_logging=Partial logging |user_authentication_event_logging_proof=https://us.roborock.com/products/roborock-qrevo-curv-x |user_authentication_event_logging_comment=Cleaning history and consumable information are logged in the app, but a complete administrator audit log is not documented. |user_authentication_passwords=Require change after setup with complexity requirements |user_authentication_passwords_proof=https://us.roborock.com/privacy-policy |user_authentication_passwords_comment=Setup uses a user-created Roborock account; no shared default device password is documented. |latest_classification_date=2026-10-25 |grade_calculator_version=1 }} == SwitchBot Lock Pro == {{Classification |name=SwitchBot Lock Pro |brand=SwitchBot |parent_company=Shenzhen Wonderlabs Technology Co., Ltd. |website=https://www.switch-bot.com/products/switchbot-lock-pro |release_date=2024-03-01 |generation=Lock Pro |model=Lock Pro |type=Lock |status=In sale |operating_system=Embedded firmware |companion_app=SwitchBot App |storage=No removable user storage; event history is retained in the app/cloud |battery=Battery-powered; runtime depends on model and usage |power=Replaceable batteries |charging=Battery replacement |display=None |camera=None |sound=Built-in speaker for alerts |connectivity=Bluetooth and Matter via a compatible hub |device_known_hardware_tampering=Rare |device_known_hardware_tampering_proof=https://www.switch-bot.com/products/switchbot-lock-pro https://nvd.nist.gov/vuln/detail/CVE-2026-8374 |device_known_hardware_tampering_comment=The exterior keypad and lock body are physically exposed, although tamper alarms and mechanical locking are provided. |device_known_vulnerabilties=Rare |device_known_vulnerabilties_proof=https://nvd.nist.gov/vuln/detail/CVE-2026-8374 https://neodyme.io/en/advisories/cve-2026-8374/ |device_known_vulnerabilties_comment=CVE-2026-8374 is a high-severity Bluetooth communication bypass affecting the SwitchBot Door Lock series. |device_prior_attacks=None |device_prior_attacks_proof=https://nvd.nist.gov/vuln/detail/CVE-2026-8374 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=SwitchBot |device_prior_attacks_comment=NVD and CISA did not record a known public exploitation campaign as of 2026-10-25. |device_updatability=Very common |device_updatability_proof=https://www.switch-bot.com/products/switchbot-lock-pro https://support.switch-bot.com/hc/en-us |device_updatability_comment=The lock is managed through the SwitchBot app and vendor support, with firmware updates delivered through the product ecosystem. |system_authentication_with_other_systems=Full |system_authentication_with_other_systems_proof=https://www.switch-bot.com/products/switchbot-lock-pro |system_authentication_with_other_systems_comment=Matter support enables authenticated integration with major smart-home ecosystems through a compatible hub. |system_communications=Encrypted with obselete encryption |system_communications_proof=https://nvd.nist.gov/vuln/detail/CVE-2026-8374 https://neodyme.io/en/advisories/cve-2026-8374/ |system_communications_comment=The Bluetooth communication protocol was shown to permit an electronic-lock bypass in affected versions. |system_storage=Encrypted with obselete encryption |system_storage_proof=https://www.switch-bot.com/products/switchbot-lock-pro |system_storage_comment=Lock events are retained in the app/cloud, but at-rest encryption and retention controls are not publicly specified. |user_authentication_account_management=Basic |user_authentication_account_management_proof=https://www.switch-bot.com/products/switchbot-lock-pro https://www.switch-bot.com/privacy-policy |user_authentication_account_management_comment=A SwitchBot account is used for remote access and event history; detailed administrator roles are not documented. |user_authentication_authentication=Basic |user_authentication_authentication_proof=https://www.switch-bot.com/products/switchbot-lock-pro https://nvd.nist.gov/vuln/detail/CVE-2026-8374 |user_authentication_authentication_comment=Supports fingerprint, keypad, app and mechanical entry, but the published Bluetooth bypass weakens the electronic authentication path. |user_authentication_brute_force_protection=Basic |user_authentication_brute_force_protection_proof=https://support.switch-bot.com/hc/en-us https://www.switch-bot.com/privacy-policy |user_authentication_brute_force_protection_comment=No public lockout or rate-limit policy was found; the rating is conservative. |user_authentication_event_logging=Access event logged |user_authentication_event_logging_proof=https://www.switch-bot.com/products/switchbot-lock-pro |user_authentication_event_logging_comment=The app provides lock event history and real-time notifications for access activity. |user_authentication_passwords=Require change after setup with complexity requirements |user_authentication_passwords_proof=https://www.switch-bot.com/privacy-policy |user_authentication_passwords_comment=Setup uses a user-created SwitchBot account and user-defined lock credentials; no shared default password is documented. |latest_classification_date=2026-10-25 |grade_calculator_version=1 }} == Xiaomi Smart Air Purifier 4 Pro (AC-M15-SC) == {{Classification |name=Xiaomi Smart Air Purifier 4 Pro |brand=Xiaomi |parent_company=Xiaomi Corporation |website=https://www.mi.com/global/product/xiaomi-smart-air-purifier-4-pro/ |release_date=2022-08-11 |generation=4 Pro |model=AC-M15-SC |type=Air Purifier |status=In sale |dimensions=275 × 275 × 680 mm |mass=Approx. 6.8 kg |operating_system=Embedded firmware |companion_app=Mi Home / Xiaomi Home |storage=No removable user storage; filter and usage status retained in the app |battery=None |power=100–240 V AC; rated power 55 W |charging=N/A |display=OLED display with PM2.5/PM10 and air-quality indicators |camera=None |sound=Built-in fan; minimum stated noise 33.7 dB(A) in Night Mode |connectivity=2.4 GHz Wi-Fi; Alexa and Google Assistant integrations |device_known_hardware_tampering=Rare |device_known_hardware_tampering_proof=https://www.mi.com/global/product/xiaomi-smart-air-purifier-4-pro/ https://www.mi.com/global/product/xiaomi-smart-air-purifier-4-pro/specs/ |device_known_hardware_tampering_comment=The removable top grille, filter compartment and reset controls are physically accessible. |device_known_vulnerabilties=None |device_known_vulnerabilties_proof=https://nvd.nist.gov/vuln/search/results?query=Xiaomi%20Smart%20Air%20Purifier%204%20Pro&search_type=all https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=Xiaomi |device_known_vulnerabilties_comment=No exact product CVE or known-exploited entry was found in the reviewed NVD and CISA records as of 2026-10-25. |device_prior_attacks=None |device_prior_attacks_proof=https://nvd.nist.gov/vuln/search/results?query=Xiaomi%20Smart%20Air%20Purifier%204%20Pro&search_type=all |device_prior_attacks_comment=No public model-specific exploitation campaign was found. |device_updatability=Very common |device_updatability_proof=https://www.mi.com/global/product/xiaomi-smart-air-purifier-4-pro/ https://www.mi.com/global/support/ |device_updatability_comment=The purifier is managed through Mi Home/Xiaomi Home and has global vendor support for firmware and app updates. |system_authentication_with_other_systems=Partial |system_authentication_with_other_systems_proof=https://www.mi.com/global/product/xiaomi-smart-air-purifier-4-pro/ |system_authentication_with_other_systems_comment=Supports Alexa and Google Assistant voice integrations, but no native HomeKit or Matter path is documented. |system_communications=Encrypted with obselete encryption |system_communications_proof=https://www.mi.com/global/product/xiaomi-smart-air-purifier-4-pro/ https://www.mi.com/global/privacy/ |system_communications_comment=The purifier relies on the Mi Home cloud and local Wi-Fi connection; current encryption details are not published on the product page. |system_storage=Encrypted with obselete encryption |system_storage_proof=https://www.mi.com/global/product/xiaomi-smart-air-purifier-4-pro/ |system_storage_comment=Air-quality history and filter status are retained by the app, but at-rest encryption is not documented. |user_authentication_account_management=Basic |user_authentication_account_management_proof=https://www.mi.com/global/product/xiaomi-smart-air-purifier-4-pro/ https://www.mi.com/global/privacy/ |user_authentication_account_management_comment=A Xiaomi account is used for device ownership and automation; detailed administrator roles are not documented. |user_authentication_authentication=Basic |user_authentication_authentication_proof=https://www.mi.com/global/product/xiaomi-smart-air-purifier-4-pro/ https://www.mi.com/global/privacy/ |user_authentication_authentication_comment=Access relies on the Xiaomi account and app pairing; device-specific multi-factor authentication is not documented. |user_authentication_brute_force_protection=Basic |user_authentication_brute_force_protection_proof=https://www.mi.com/global/support/ https://www.mi.com/global/privacy/ |user_authentication_brute_force_protection_comment=No public lockout or rate-limit policy was found; the rating is conservative. |user_authentication_event_logging=Partial logging |user_authentication_event_logging_proof=https://www.mi.com/global/product/xiaomi-smart-air-purifier-4-pro/ |user_authentication_event_logging_comment=Air-quality history and filter-life records are available, but a complete administrator audit log is not documented. |user_authentication_passwords=Require change after setup with complexity requirements |user_authentication_passwords_proof=https://www.mi.com/global/privacy/ |user_authentication_passwords_comment=Setup uses a user-created Xiaomi account; no shared default device password is documented. |latest_classification_date=2026-10-25 |grade_calculator_version=1 }} == eufy Smart Lock C220 (T8506111) == {{Classification |name=eufy Smart Lock C220 |brand=eufy |parent_company=Anker Innovations |website=https://www.eufy.com/products/t8506111 |release_date=2024-06-01 |generation=C220 |model=T8506111 |type=Lock |status=In sale |operating_system=Embedded firmware |companion_app=eufy Security |storage=No removable user storage; event history is retained in the eufy Security app |battery=8 × AA batteries; approximately 8 months under stated usage |power=8 × AA batteries |charging=Battery replacement |display=None |camera=None |sound=Built-in speaker for alerts |connectivity=2.4 GHz Wi-Fi and Bluetooth |device_known_hardware_tampering=Rare |device_known_hardware_tampering_proof=https://www.eufy.com/products/t8506111 |device_known_hardware_tampering_comment=The exterior keypad and lock body are physically exposed; BHMA Grade 3 testing and an unusual-attempt alarm reduce but do not eliminate tampering risk. |device_known_vulnerabilties=None |device_known_vulnerabilties_proof=https://nvd.nist.gov/vuln/search/results?query=eufy%20Smart%20Lock%20C220&search_type=all https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=eufy |device_known_vulnerabilties_comment=No exact product CVE or known-exploited entry was found in the reviewed NVD and CISA records as of 2026-10-25. |device_prior_attacks=None |device_prior_attacks_proof=https://nvd.nist.gov/vuln/search/results?query=eufy%20Smart%20Lock%20C220&search_type=all |device_prior_attacks_comment=No public model-specific exploitation campaign was found. |device_updatability=Very common |device_updatability_proof=https://www.eufy.com/products/t8506111 https://support.eufy.com/s/ |device_updatability_comment=The lock is managed through the eufy Security app and has vendor support for firmware and feature updates. |system_authentication_with_other_systems=Partial |system_authentication_with_other_systems_proof=https://www.eufy.com/products/t8506111 |system_authentication_with_other_systems_comment=Supports Alexa and Google voice integrations and the wider eufy ecosystem, but no native HomeKit or Matter path is documented. |system_communications=Encrypted with obselete encryption |system_communications_proof=https://www.eufy.com/products/t8506111 https://www.eufy.com/privacy |system_communications_comment=The lock uses Wi-Fi, Bluetooth and cloud services, but current encryption details are not published on the product page. |system_storage=Encrypted with obselete encryption |system_storage_proof=https://www.eufy.com/products/t8506111 https://www.eufy.com/privacy |system_storage_comment=Access event history is retained in the app, but at-rest encryption and retention controls are not publicly specified. |user_authentication_account_management=Basic |user_authentication_account_management_proof=https://www.eufy.com/products/t8506111 https://www.eufy.com/privacy |user_authentication_account_management_comment=An eufy Security account is used for remote access and event history; detailed administrator roles are not documented. |user_authentication_authentication=Secure |user_authentication_authentication_proof=https://www.eufy.com/products/t8506111 |user_authentication_authentication_comment=Supports fingerprint, keypad, app, Apple Watch and mechanical-key entry with a self-learning fingerprint sensor. |user_authentication_brute_force_protection=Basic |user_authentication_brute_force_protection_proof=https://support.eufy.com/s/ https://www.eufy.com/privacy |user_authentication_brute_force_protection_comment=No public lockout or rate-limit policy was found; the rating is conservative. |user_authentication_event_logging=Access event logged |user_authentication_event_logging_proof=https://www.eufy.com/products/t8506111 |user_authentication_event_logging_comment=The app provides real-time notifications and event history for lock usage and unusual attempts. |user_authentication_passwords=Require change after setup with complexity requirements |user_authentication_passwords_proof=https://www.eufy.com/privacy |user_authentication_passwords_comment=Setup uses a user-created eufy account and user-defined lock credentials; no shared default password is documented. |latest_classification_date=2026-10-25 |grade_calculator_version=1 }} == TP-Link Deco BE65 (BE11000) == {{Classification |name=TP-Link Deco BE65 |brand=TP-Link |parent_company=TP-Link Systems Inc. |website=https://www.tp-link.com/us/deco-mesh-wifi/product-family/deco-be65/ |release_date=2024-03-01 |generation=Deco BE65 |model=BE11000 |type=Router |status=In sale |dimensions=107.5 × 107.5 × 176 mm per unit |operating_system=Embedded firmware |companion_app=TP-Link Deco app |storage=Internal firmware and configuration storage; 1 × USB 3.0 port |battery=None |power=AC power adapter |charging=N/A |display=None |camera=None |sound=None |connectivity=Tri-band Wi-Fi 7, 4 × 2.5 Gbps Ethernet, 1 × USB 3.0 |device_known_hardware_tampering=Rare |device_known_hardware_tampering_proof=https://www.tp-link.com/us/deco-mesh-wifi/product-family/deco-be65/ |device_known_hardware_tampering_comment=Reset, WPS and Ethernet ports are physically accessible; local access can reset the unit but does not by itself reveal stored credentials. |device_known_vulnerabilties=None |device_known_vulnerabilties_proof=https://nvd.nist.gov/vuln/search/results?query=TP-Link%20Deco%20BE65&search_type=all https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=TP-Link |device_known_vulnerabilties_comment=No exact Deco BE65 CVE or known-exploited entry was found as of 2026-10-25; a separate CVE affects the Deco BE65 Pro, not this exact model. |device_prior_attacks=None |device_prior_attacks_proof=https://nvd.nist.gov/vuln/search/results?query=TP-Link%20Deco%20BE65&search_type=all |device_prior_attacks_comment=No public campaign against this exact model was found. |device_updatability=Very common |device_updatability_proof=https://www.tp-link.com/us/deco-mesh-wifi/product-family/deco-be65/ https://www.tp-link.com/us/support/ |device_updatability_comment=TP-Link provides product-specific firmware downloads, release notes and support. |system_authentication_with_other_systems=Partial |system_authentication_with_other_systems_proof=https://www.tp-link.com/us/deco-mesh-wifi/product-family/deco-be65/ |system_authentication_with_other_systems_comment=Provides WPA3 device authentication, VPN access and guest/IoT isolation, but does not expose a general HomeKit or Matter controller interface. |system_communications=Encrypted with up-to-date encryption |system_communications_proof=https://www.tp-link.com/us/deco-mesh-wifi/product-family/deco-be65/ |system_communications_comment=Supports WPA3-Personal, OpenVPN and L2TP/IPSec VPN services. |system_storage=Encrypted with obselete encryption |system_storage_proof=https://www.tp-link.com/us/deco-mesh-wifi/product-family/deco-be65/ |system_storage_comment=Configuration and firmware storage are internal, but at-rest encryption is not documented on the public specification page. |user_authentication_account_management=Basic |user_authentication_account_management_proof=https://www.tp-link.com/us/deco-mesh-wifi/product-family/deco-be65/ https://www.tp-link.com/us/privacy/ |user_authentication_account_management_comment=A TP-Link/Deco account is used for cloud management; detailed administrator roles are not documented. |user_authentication_authentication=Secure |user_authentication_authentication_proof=https://www.tp-link.com/us/deco-mesh-wifi/product-family/deco-be65/ |user_authentication_authentication_comment=Supports WPA3, device isolation, guest networking and VPN authentication. |user_authentication_brute_force_protection=Exist |user_authentication_brute_force_protection_proof=https://www.tp-link.com/us/deco-mesh-wifi/product-family/deco-be65/ https://www.tp-link.com/us/support/ |user_authentication_brute_force_protection_comment=HomeShield security features and login controls are provided, but detailed rate-limit thresholds are not public. |user_authentication_event_logging=Access event logged |user_authentication_event_logging_proof=https://www.tp-link.com/us/deco-mesh-wifi/product-family/deco-be65/ |user_authentication_event_logging_comment=The Deco app exposes client activity, security alerts and network event history. |user_authentication_passwords=Require change after setup with complexity requirements |user_authentication_passwords_proof=https://www.tp-link.com/us/privacy/ |user_authentication_passwords_comment=Setup requires a user-created administrator credential; no shared default Wi-Fi or administrator password is documented. |latest_classification_date=2026-10-25 |grade_calculator_version=1 }} == Govee Floor Lamp 2 (H607C) == {{Classification |name=Govee Floor Lamp 2 |brand=Govee |parent_company=Shenzhen Intellirocks Network Technology Co., Ltd. |website=https://us.govee.com/products/govee-floor-lamp-2 |release_date=2024-08-01 |generation=Floor Lamp 2 |model=H607C |type=Light |status=In sale |dimensions=5.51 × 5.51 × 59.84 in |operating_system=Embedded firmware |companion_app=Govee Home |storage=No removable user storage; scenes and settings are retained by the app/device |battery=None |power=24 V, 48 W |charging=N/A |display=None |camera=None |sound=Built-in microphone for music synchronization |connectivity=2.4 GHz Wi-Fi, Bluetooth and Matter; Alexa, Google Assistant and HomeKit |device_known_hardware_tampering=Rare |device_known_hardware_tampering_proof=https://us.govee.com/products/govee-floor-lamp-2 |device_known_hardware_tampering_comment=The lamp, power connection and reset controls are physically accessible, but the device holds no user media storage. |device_known_vulnerabilties=None |device_known_vulnerabilties_proof=https://nvd.nist.gov/vuln/search/results?query=Govee%20Floor%20Lamp%202&search_type=all https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=Govee |device_known_vulnerabilties_comment=No exact product CVE or known-exploited entry was found in the reviewed NVD and CISA records as of 2026-10-25. |device_prior_attacks=None |device_prior_attacks_proof=https://nvd.nist.gov/vuln/search/results?query=Govee%20Floor%20Lamp%202&search_type=all |device_prior_attacks_comment=No public model-specific exploitation campaign was found. |device_updatability=Very common |device_updatability_proof=https://us.govee.com/products/govee-floor-lamp-2 https://www.govee.com/software-updates |device_updatability_comment=Govee provides app-managed updates and a public software-update page. |system_authentication_with_other_systems=Full |system_authentication_with_other_systems_proof=https://us.govee.com/products/govee-floor-lamp-2 |system_authentication_with_other_systems_comment=Matter support provides authenticated integration with HomeKit, Alexa and Google Assistant. |system_communications=Encrypted with up-to-date encryption |system_communications_proof=https://us.govee.com/products/govee-floor-lamp-2 |system_communications_comment=Matter uses certificate-based commissioning and encrypted operational communication. |system_storage=Encrypted with up-to-date encryption |system_storage_proof=https://us.govee.com/products/govee-floor-lamp-2 |system_storage_comment=The lamp has no removable media; lighting scenes and Matter credentials are retained by the app and device. |user_authentication_account_management=Basic |user_authentication_account_management_proof=https://us.govee.com/products/govee-floor-lamp-2 https://www.govee.com/security/policy |user_authentication_account_management_comment=A Govee Home account is used for scenes and cloud features; detailed administrator roles are not documented. |user_authentication_authentication=Basic |user_authentication_authentication_proof=https://us.govee.com/products/govee-floor-lamp-2 https://www.govee.com/security/policy |user_authentication_authentication_comment=Access relies on the Govee account and Matter commissioning; device-specific multi-factor authentication is not documented. |user_authentication_brute_force_protection=Basic |user_authentication_brute_force_protection_proof=https://www.govee.com/security/policy |user_authentication_brute_force_protection_comment=No public lockout or rate-limit policy was found; the rating is conservative. |user_authentication_event_logging=Absent |user_authentication_event_logging_proof=https://us.govee.com/products/govee-floor-lamp-2 |user_authentication_event_logging_comment=The public product documentation does not describe an access-event or administrator audit log. |user_authentication_passwords=Require change after setup with complexity requirements |user_authentication_passwords_proof=https://www.govee.com/security/policy |user_authentication_passwords_comment=Setup uses a user-created Govee account; no shared default device password is documented. |latest_classification_date=2026-10-25 |grade_calculator_version=1 }}
For new submissions, pages will appear blank until approval.
Summary: This is a minor edit Watch this page
Save page Show preview Show changes Cancel
