Edit Classification: Sonoff Basic R3 (BASICR3)

You do not have permission to edit this page, for the following reasons:

The action you have requested is limited to users in the group: Users.
You must confirm your email address before editing pages. Please set and validate your email address through your user preferences.

1. General Information

Product full name *
Brand * (see Category:Brand)
Parent company (see Category:Brand)
Website *
Release date *
Generation / Model(s)	Gen: • Model:
Type/Category * (see Category:Product)
Status
Dimensions & Mass	Dim: • Mass:
Operating System & App	OS: • Companion App:

2. Hardware Specifications

CPU / GPU	CPU: • GPU:
Memory / Storage	RAM: • Storage:
Power, Battery & Charging	Battery: • Power: • Charging:
Display & Camera	Display: • Camera:
Sound & Connectivity	Sound: • Connectivity:

3. Security Classification

Device Security

Criterion	Value *	Proof URLs (Paste URLs directly)
Known hardware tampering	None Rare Very common	https://zone.ci/secarticles/wx/582750.html
Known vulnerabilities	None Rare Very common	https://dl.acm.org/doi/abs/10.1145/3411498.3419965
Prior attacks	None Rare Very common	https://www.bitdefender.com/files/News/CaseStudies/study/389/Bitdefender-PR-Whitepaper-Sonoff-creat4984-en-EN-interactive.pdf
Updatability	Very common Rare None	https://www.bitdefender.com/files/News/CaseStudies/study/389/Bitdefender-PR-Whitepaper-Sonoff-creat4984-en-EN-interactive.pdf

System Security

Criterion	Value *	Proof URLs (Paste URLs directly)
Authentication with other systems	Full Partial No	https://www.bitdefender.com/files/News/CaseStudies/study/389/Bitdefender-PR-Whitepaper-Sonoff-creat4984-en-EN-interactive.pdf
Communications	Encrypted with up-to-date encryption Encrypted with obselete encryption No encryption	https://dl.acm.org/doi/abs/10.1145/3411498.3419965
Storage	Encrypted with up-to-date encryption Encrypted with obselete encryption No encryption	https://zone.ci/secarticles/wx/582750.html

User Authentication

Criterion	Value *	Proof URLs (Paste URLs directly)
Account management	Full Basic Absent	https://nvd.nist.gov/vuln/detail/CVE-2024-7205
Authentication	Secure Basic Absent	https://zone.ci/secarticles/wx/582750.html
Brute-force protection	Exist Basic Absent	https://www.bitdefender.com/files/News/CaseStudies/study/389/Bitdefender-PR-Whitepaper-Sonoff-creat4984-en-EN-interactive.pdf
Event logging	Access event logged Partial logging Absent	https://zone.ci/secarticles/wx/582750.html
Passwords	Require change after setup with complexity requirements Require change after setup Default/Common/Easy to guess	https://sonoff.tech/

4. Reserved for Admins / Sysops

Latest classification date
Grade Calculator version

Free text / Notes:

Overall assessment: Sonoff Basic R3 shows systemic weakness in the eWeLink ecosystem rather than a single bug. The device ID used for cloud binding carries only three random bytes and is not tied to a device secret, making remote takeover practical; ESP-Touch pairing leaks Wi-Fi credentials (CVE-2020-12702); the hardware exposes UART/download mode with no Secure Boot. OTA updates are available and delivered, which is the main mitigating factor. [[Category:Classification]] [[Category:Calculator v1]] [[Category:Sonoff]]

For new submissions, pages will appear blank until approval.

 Summary:
   This is a minor edit
 Watch this page

    		Cancel

Anonymous

Search

Edit Classification: Sonoff Basic R3 (BASICR3)

Namespaces

More

Page actions

1. General Information

2. Hardware Specifications

3. Security Classification

Device Security

System Security

User Authentication

4. Reserved for Admins / Sysops

Free text / Notes:

Navigation

USER

NAVIGATION

CLASSIFICATION

ABOUT

SUPPORT

Wiki tools

Wiki tools

Anonymous

Search

Edit Classification: Sonoff Basic R3 (BASICR3)

1. General Information

2. Hardware Specifications

3. Security Classification

Device Security

System Security

User Authentication

4. Reserved for Admins / Sysops

Free text / Notes:

Navigation

Wiki tools

Page tools