You do not have permission to edit this page, for the following reasons:
'''Assessment scope''' Documentation assessment dated 26 October 2026; no physical inspection or exploit test. Profile: supported official manufacturer firmware, available patches installed, locked bootloader and a strong screen-lock credential. Communication assessment covers correctly validated TLS 1.2/1.3 application connections; arbitrary apps, cellular signaling, SMS, Bluetooth and plaintext integrations are outside this boundary. Storage means internal user-data flash, not every read-only partition or removable card. Platform compliance is an inference, not device testing. The calculated grade applies only to this stated profile. Qualitative mappings and the password-policy mismatch are disclosed for reviewer consideration. '''Exact model and release evidence''' 2024-04-24 is the UK availability date stated by HMD for Pulse and Pulse+. HMD maps Pulse to TA-1589 in UKCA/EU declarations. Pulse+, Pulse Pro and regional TA-1594/TA-1604 are not counted as this exact model. [https://www.hmd.com/en_gb/press/hmd-pulse-press-release Manufacturer release] [https://www.hmd.com/en_gb/declaration-of-conformity Exact-model / platform evidence]. '''Scoring interpretation''' Vector: 3,3,1,2 / 2,1,1 / 2,2,1,2,3. Category ceiling means: 3,2,2; total 7, provisional profile grade C. Labels are qualitative assessor mappings. The password criterion has no exact fit for user-created Android credentials; score 3 does not allege a shared factory password. If this mapping is rejected, treat the total as unresolved. '''Vulnerability and attack scope''' CVE-2025-48593 is Android platform history, not proof this exact SKU is currently exploitable. Check affected components, installed build and patch level. The limited research found no model-attributed in-the-wild incident; this is not evidence of zero attacks. '''Practical risk and improvements''' Keep physical custody during repairs and protect or erase sensitive data before service; external cards need separate protection. Install security updates, retain bootloader protection, configure a strong unique screen credential, enable account MFA, use trusted applications and validated TLS, and protect external backups independently. '''Originality''' WikiIoT product-family searches on 2026-10-26 did not identify this product. Pending or unindexed submissions remain possible. '''Methodology''' [https://fehmijaafar.net/wiki-iot/index.php/Methodology WikiIoT methodology]. Classification date and calculator version are reserved for administrators. '''Vendor service issue''' HMD reported a FOTA cloud infrastructure misconfiguration, resolved 2026-08-28 and disclosed 2026-09-25. Potential data exposure is documented; exploited handsets and affected model lists are not established. [https://www.hmd.com/en_int/security-updates Official notice]. This service issue is not counted as a confirmed prior device attack.
For new submissions, pages will appear blank until approval.
Summary: This is a minor edit Watch this page
Save page Show preview Show changes Cancel
