You do not have permission to edit this page, for the following reasons:
Overall assessment: The SP111 illustrates that the absence of CVEs does not equal security. Peer-reviewed research (MDPI Electronics, 2024) demonstrated a complete compromise path: the UART reprogramming interface is trivially discoverable, modified firmware can be uploaded without authentication, and such firmware can exfiltrate the Wi-Fi SSID and password to an external command-and-control server. The device authorization key and backup network structures are stored in flash as plain JSON with no encryption at rest. Updates are downloaded automatically from the vendor server without user confirmation, which shows an active update channel but no user control. No botnet recruitment or in-the-wild exploitation of this model has been reported, and no CVE is recorded against the brand, so the classification rests primarily on documented weaknesses rather than observed attacks. [[Category:Classification]] [[Category:Calculator v1]] [[Category:Gosund]]
For new submissions, pages will appear blank until approval.
Summary: This is a minor edit Watch this page
Save page Show preview Show changes Cancel
