You do not have permission to edit this page, for the following reasons:
Classification target is SwitchBot Lock Ultra, released November 2025. The most consequential rating is Known vulnerabilities = Very common and Communications = Encrypted with obsolete encryption, both anchored by CVE-2026-8374, which documents that the Bluetooth communication protocol can be manipulated to bypass the electronic lock and access controls. Authentication = Basic is a direct consequence of this documented bypass. Updatability = Rare is driven by the absence of a published, binding security-update commitment for the Lock Ultra; community reports confirm ad hoc firmware delivery (e.g., FW 2.8 via support), but there is no equivalent of Google’s 5-year minimum for Nest devices. Known hardware tampering = Rare reflects the ANSI/BHMA Grade 2 physical hardening alongside the protocol-level bypass that does not require physical disassembly. Storage = Encrypted with up-to-date encryption is vendor-claimed (AES-128) and has not been independently verified.
For new submissions, pages will appear blank until approval.
Summary: This is a minor edit Watch this page
Save page Show preview Show changes Cancel
