You do not have permission to edit this page, for the following reasons:
'''Assessment scope''' Documentation assessment dated 26 October 2026; no physical inspection or exploit test. Profile: supported official manufacturer firmware, available patches installed, locked bootloader and a strong screen-lock credential. Communication assessment covers correctly validated TLS 1.2/1.3 application connections; arbitrary apps, cellular signaling, SMS, Bluetooth and plaintext integrations are outside this boundary. Storage means internal user-data flash, not every read-only partition or removable card. Platform compliance is an inference, not device testing. The calculated grade applies only to this stated profile. Qualitative mappings and the password-policy mismatch are disclosed for reviewer consideration. '''Exact model and release evidence''' 2024-04-24 is HMD stated UK retail availability for Pulse+. The UKCA listing identifies TA-1602. This is the separately marketed Pulse+ with a 50 MP main camera, not the 13 MP Pulse or Pulse Pro; the same platform is not treated as independent security-design evidence. [https://www.hmd.com/en_gb/press/hmd-pulse-press-release Manufacturer release] [https://www.hmd.com/en_gb/declaration-of-conformity Exact-model / platform evidence]. '''Scoring interpretation''' Vector: 3,3,1,2 / 2,1,1 / 2,2,1,2,3. Category ceiling means: 3,2,2; total 7, provisional profile grade C. Labels are qualitative assessor mappings. The password criterion has no exact fit for user-created Android credentials; score 3 does not allege a shared factory password. If this mapping is rejected, treat the total as unresolved. '''Vulnerability and attack scope''' CVE-2025-48593 is Android platform history, not proof this exact SKU is currently exploitable. Check affected components, installed build and patch level. The limited research found no model-attributed in-the-wild incident; this is not evidence of zero attacks. '''Practical risk and improvements''' Camera and synchronized account data can remain exposed through account compromise even when internal storage is encrypted. Secure removable media independently. Install security updates, retain bootloader protection, configure a strong unique screen credential, enable account MFA, use trusted applications and validated TLS, and protect external backups independently. '''Originality''' WikiIoT product-family searches on 2026-10-26 did not identify this product. Pending or unindexed submissions remain possible. '''Methodology''' [https://fehmijaafar.net/wiki-iot/index.php/Methodology WikiIoT methodology]. Classification date and calculator version are reserved for administrators. '''Vendor service issue''' HMD reported a FOTA cloud infrastructure misconfiguration, resolved 2026-08-28 and disclosed 2026-09-25. Potential data exposure is documented; exploited handsets and affected model lists are not established. [https://www.hmd.com/en_int/security-updates Official notice]. This service issue is not counted as a confirmed prior device attack.
For new submissions, pages will appear blank until approval.
Summary: This is a minor edit Watch this page
Save page Show preview Show changes Cancel
