You do not have permission to edit this page, for the following reasons:
== Assessment scope == Historical documentary case study of stock Kobold VR300 firmware 4.2.5-166 (build dated 11 January 2019), including its normal local manual-driving, cloud and app control paths. Findings are bounded to that researched build and shared ecosystem components explicitly applicable to VR300. No physical test is claimed. Later releases and current support are described separately. == Method and evidence boundaries == This is a documentary case-study assessment of the exact hardware, firmware and explicitly stated configuration, reviewed on 24 October 2026. No physical installation, penetration test or traffic capture by the author is claimed. Historical flaws do not establish current unpatched exposure. The website supplies qualitative categories rather than statistical thresholds: repeated real maintenance supports Updatability 1; isolated/uncertain maintenance supports2; a documented no-update condition supports3. Vulnerability/attack frequency labels are reasoned judgments, and a laboratory demonstration is not an observed campaign. None for prior attacks means no exact-model field campaign established in the reviewed sources, not proof of lifetime absence. Communications follows the least-protected enabled path carrying control, credentials or application payloads; a DNS/discovery packet alone is not used to label an entire device unencrypted. Storage evaluates confidential device-resident flash contents, not merely cloud security or whether executable firmware is readable. For Passwords, the methodology discusses first-setup credentials and expressly allows unique initial passwords. Where mandatory first-use creation or explicitly configured unique credentials do not match a shared-default-change label literally, option2 is a disclosed functional mapping, not a claim of forced periodic rotation. Option1 additionally requires enforced complexity; option3 requires positive evidence of common, predictable or unprotected access. Dates preserve the identified manufacturer announcement/availability or clearly identified primary regional catalog basis. No arbitrary first-of-month date is inserted. The calculated IDRS device grade is not a manufacturer certification or a student assignment mark. Calculated IDRS: 2 + 3 + 3 = 8 (D). Date basis: French retailer Pieces Detachees Elec explicitly dates its original VR300 catalogue entry Monday 22 October 2018. This day is the documented regional catalogue-listing date, not a manufacturer-confirmed global first-sale day. The manufacturer annual report confirms availability since October 2018 only: https://www.vorwerk-group.com/de/presse/publikationen/Vorwerk-Annual-Report-2018.pdf . Date source: https://www.piecesdetacheeselec.com/appareils-neufs-vorwerk/26469-robot-kobold-vr300-vorwerk.html Patch/support context: The WOOT19 researchers report vendor fixes rolled out through June 2019. Official UK support lists later releases through 4.6.4 and OTA/manual procedures; its April 2025 page update is not treated as the firmware release day. No current-firmware retest is claimed. Product-specific boundaries: The grade describes the historical 4.2.5-166 deployment, not current 4.6.4 security. The precise form day records a named French retailer catalogue entry; only the launch month is manufacturer-confirmed. Passwords 3 concerns the documented predictable device-control secret, not every owner-selected cloud password. Storage 2 concerns flash-resident RC4-protected diagnostic logs/cores, not a claim that all flash partitions have the same protection. == Hardware and general-information supplement == Supplement reviewed on 25 October 2026. Manufacturer model specifications and explicitly identified historical manuals support the added fields. Hardware capabilities do not imply that optional services, accessories or every capacity variant are enabled in the assessed case. Unpublished or unverified parameters are identified rather than guessed. Current sale/support status is separate from the original historical firmware/configuration assessment; the twelve security selections and original evidence have not been changed. === Specification evidence === * Generation, Dimensions, Mass, CPU, GPU, Memory, Battery, Power, Charging, Display, Camera, Sound, Connectivity: [https://www.vorwerk.com/gb/en/c/dam-home/service/instruction-manuals/_fileadmin_kobold_data_uk_02kobold_05service_instruction_manuals_GA_24812_01_VR300_EN_UK_0718.pdf source 1]. * Status: [https://assets.vorwerk.com/content/dam/general/zendesk-guide/manuals/vr300/Web_GA_24812_05_VR300_EN_UK_1221_con.pdf source 1]. * Operating system: [https://www.usenix.org/system/files/woot19-paper_ullrich.pdf source 1]. * Companion App: [https://www.vorwerk.com/gb/en/c/dam-home/service/instruction-manuals/_fileadmin_kobold_data_uk_02kobold_05service_instruction_manuals_GA_24812_01_VR300_EN_UK_0718.pdf source 1]; [https://assets.vorwerk.com/content/dam/general/zendesk-guide/manuals/vr300/Web_GA_24812_05_VR300_EN_UK_1221_con.pdf source 2]. * Storage: [https://www.vorwerk.com/gb/en/c/dam-home/service/instruction-manuals/_fileadmin_kobold_data_uk_02kobold_05service_instruction_manuals_GA_24812_01_VR300_EN_UK_0718.pdf source 1]; [https://www.usenix.org/system/files/woot19-paper_ullrich.pdf source 2]. === Specification qualifications === * The approximately 5 kg manufacturer figure includes the robot and base station; it is not robot-only net weight. * Overall numeric dimensions and chip-level CPU/RAM/storage capacities were not established from the cited manufacturer documents. * The historical app name and assessed firmware are retained; later MyKobold naming does not change the historical case. * The optional Status selector is left unset: the reviewed sources do not establish a reliable current sale/end-of-sale/end-of-life category. Firmware maintenance or an existing product page alone is not treated as proof of sale status.
For new submissions, pages will appear blank until approval.
Summary: This is a minor edit Watch this page
Save page Show preview Show changes Cancel
