Lockly Secure Pro (PGS-008)

Lockly Secure Pro (PGS-008)
Security Grade F Calculator v	Lockly Secure Pro PGS-008 Brand: Lockly (Parent: Lockly Corporation) Category: Smart lock • Model / Gen: PGS-008 Release Date: 2022-06-11 • Status: In sale Classification Date: • Official Website

Security Evaluation

1. Device Security

Criterion	Value	Proof	Comment
Known hardware tampering	None	—
Known vulnerabilities	Very common	🔗 Proof
Prior attacks	Rare	🔗 Proof
Updatability	None	—
Category Score	Score: 3 / 3

2. System Security

Criterion	Value	Proof	Comment
Authentication with other systems	Partial	—
Communications	Encrypted with obselete encryption	—
Storage	No encryption	—
Category Score	Score: 3 / 3

3. User Authentication

Criterion	Value	Proof	Comment
Account management	Basic	—
Authentication	Basic	🔗 Proof
Brute-force protection	Absent	—
Event logging	Partial logging	—
Passwords	Default/Common/Easy to guess	—
Category Score	Score: 3 / 3

Technical Specifications

Property	Details
Operating System & App	Lockly OS (RTOS based) (Companion App: )
Hardware (CPU / GPU)	CPU: ARM Cortex-M33 • GPU: None
Memory & Storage	Memory: 128 KB RAM • Storage: 1 MB Flash
Power, Battery & Charging	Battery: 4 x AA batteries • Power: Battery powered • Charging:
Display & Camera	Display: Touchscreen keypad • Camera: None
Sound & Connectivity	Sound: None • Connectivity: Wi-Fi, Bluetooth Low Energy
Physical (Dimensions & Mass)	Dimensions: • Mass:

CVE-2023-32560 is a vulnerability in the Lockly Secure Pro smart lock (CVSS 7.5, High). Researchers showed that the lock does not properly verify Bluetooth pairing requests, which allows an attacker within radio range to replay a previously captured unlock command and open the door without knowing the password. The device also stores user credentials in a reversible form, so a compromise of the device exposes all registered fingerprints and PIN codes. A vulnerable smart lock directly threatens the physical security of the home, so it receives the lowest rating.