You do not have permission to edit this page, for the following reasons:
'''Assessment scope''' Documentation assessment dated 26 October 2026; no physical inspection or exploit test. Profile: supported official manufacturer firmware, available patches installed, locked bootloader and a strong screen-lock credential. Communication assessment covers correctly validated TLS 1.2/1.3 application connections; arbitrary apps, cellular signaling, SMS, Bluetooth and plaintext integrations are outside this boundary. Storage means internal user-data flash, not every read-only partition or removable card. Platform compliance is an inference, not device testing. The calculated grade applies only to this stated profile. Qualitative mappings and the password-policy mismatch are disclosed for reviewer consideration. '''Exact model and release evidence''' 2025-06-05 is the manufacturer announcement that Fusion X1 was available to buy. This is the European product release context (euro pricing); the localized en_in URL does not prove an Indian sale date. TA-1672 is explicitly listed in UKCA/EU declarations. Region-specific subvariant first sale was not separately established. [https://www.hmd.com/en_in/press/hmd-fusion-x1-press-release-june-2025 Manufacturer release] [https://www.hmd.com/en_gb/declaration-of-conformity Exact-model / platform evidence]. '''Scoring interpretation''' Vector: 3,3,1,2 / 2,1,1 / 2,2,1,2,3. Category ceiling means: 3,2,2; total 7, provisional profile grade C. Labels are qualitative assessor mappings. The password criterion has no exact fit for user-created Android credentials; score 3 does not allege a shared factory password. If this mapping is rejected, treat the total as unresolved. '''Vulnerability and attack scope''' CVE-2025-48593 is Android platform history, not proof this exact SKU is currently exploitable. Check affected components, installed build and patch level. The limited research found no model-attributed in-the-wild incident; this is not evidence of zero attacks. '''Practical risk and improvements''' This family-oriented device may process child location and contacts. The optional Xplora Guardian subscription and its cloud protections are not assumed active or audited in this personal-device assessment. Install security updates, retain bootloader protection, configure a strong unique screen credential, enable account MFA, use trusted applications and validated TLS, and protect external backups independently. '''Originality''' WikiIoT product-family searches on 2026-10-26 did not identify this product. Pending or unindexed submissions remain possible. '''Methodology''' [https://fehmijaafar.net/wiki-iot/index.php/Methodology WikiIoT methodology]. Classification date and calculator version are reserved for administrators. '''Vendor service issue''' HMD reported a FOTA cloud infrastructure misconfiguration, resolved 2026-08-28 and disclosed 2026-09-25. Potential data exposure is documented; exploited handsets and affected model lists are not established. [https://www.hmd.com/en_int/security-updates Official notice]. This service issue is not counted as a confirmed prior device attack.
For new submissions, pages will appear blank until approval.
Summary: This is a minor edit Watch this page
Save page Show preview Show changes Cancel
