| TP-Link HS110 Smart Plug
|
|
Security Grade
Calculator v
|
TP-Link HS110 Smart Plug
Release Date: 2016-01-15 • Status: End of sale
|
Security Evaluation
1. Device Security
| Criterion
|
Value
|
Proof
|
Comment
|
| Known hardware tampering
|
Rare
|
๐ Proof
|
Hardware modification and firmware dumping widely documented
|
| Known vulnerabilities
|
Very common
|
๐ Proof
|
Multiple critical remote code execution vulnerabilities
|
| Prior attacks
|
Very common
|
๐ Proof
|
Used in Mirai botnet attacks
|
| Updatability
|
Rare
|
๐ Proof
|
Firmware updates ended years ago
|
| Category Score
|
Score: 3 / 3
|
2. System Security
| Criterion
|
Value
|
Proof
|
Comment
|
| Authentication with other systems
|
Partial
|
๐ Proof
|
Weak authentication, default password risks
|
| Communications
|
No encryption
|
๐ Proof
|
Local traffic unencrypted
|
| Storage
|
No encryption
|
๐ Proof
|
Local configuration stored without encryption
|
| Category Score
|
Score: 3 / 3
|
3. User Authentication
| Criterion
|
Value
|
Proof
|
Comment
|
| Account management
|
Basic
|
๐ Proof
|
Cloud account exists but local device has weak auth
|
| Authentication
|
Absent
|
๐ Proof
|
Default credentials widely known
|
| Brute-force protection
|
Basic
|
๐ Proof
|
No rate limiting for login attempts
|
| Event logging
|
Absent
|
๐ Proof
|
No local access logs
|
| Passwords
|
Require change after setup with complexity requirements
|
๐ Proof
|
Simple passwords allowed, no forced rotation
|
| Category Score
|
Score: 3 / 3
|
Technical Specifications
| Property
|
Details
|
| Operating System & App
|
Custom embedded TP-Link OS (Companion App: Kasa Smart)
|
| Hardware (CPU / GPU)
|
CPU: Qualcomm QCA4010 • GPU: N/A
|
| Memory & Storage
|
Memory: 128 KB RAM • Storage: 1 MB flash
|
| Power, Battery & Charging
|
Battery: No battery, mains powered • Power: 100โ240V AC • Charging: N/A
|
| Display & Camera
|
Display: LED indicator only • Camera: None
|
| Sound & Connectivity
|
Sound: No speaker • Connectivity: WiโFi 802.11 b/g/n
|
| Physical (Dimensions & Mass)
|
Dimensions: Height:100โฏmm / Width:66โฏmm / Thickness:77โฏmm • Mass: 185 g
|
TP-Link HS110 is an older smart plug IoT device. It suffers from multiple known critical vulnerabilities, no local traffic encryption, weak default authentication. Firmware updates are no longer available. It has been exploited in Mirai botnet DDoS attacks.