UbiBot LD1

UbiBot LD1
Security Grade A- Calculator v	UbiBot Smart Leak Detector LD1-A2L Brand: UbiBot Category: Smart Water Leak Detector • Model / Gen: LD1-A2L Release Date: 2023-06-19 • Status: In sale Classification Date: • Official Website

Security Evaluation

1. Device Security

Criterion	Value	Proof	Comment
Known hardware tampering	None	🔗 Proof	No model-specific hardware tampering incidents were identified in the reviewed documentation. This does not establish physical tamper resistance.
Known vulnerabilities	None	🔗 Proof	No publicly documented LD1-A2L-specific vulnerability was identified during this limited review. Absence of a report does not prove the device is vulnerability-free.
Prior attacks	None	🔗 Proof	No publicly documented attack specifically targeting the LD1-A2L was identified in this review.
Updatability	Very common	🔗 Proof	The LD1 series supports remote firmware upgrades through the UbiBot platform, using device commands and firmware version checks.
Category Score	Score: 1 / 3

2. System Security

Criterion	Value	Proof	Comment
Authentication with other systems	Partial	🔗 Proof	UbiBot platform APIs use account keys and channel-specific API keys. Device-level authentication details are not fully documented.
Communications	Encrypted with up-to-date encryption	🔗 Proof	The LD1 supports WEP, WPA and WPA2 Wi-Fi security. WEP is obsolete, while WPA2 provides stronger protection. Actual cloud communication encryption has not been verified.
Storage	Encrypted with up-to-date encryption	🔗 Proof	The device stores sensor records locally, but the manufacturer does not publicly specify whether these records are encrypted at rest.
Category Score	Score: 2 / 3

3. User Authentication

Criterion	Value	Proof	Comment
Account management	Full	[https://support.ubibot.com/hc/en-us/articles/28506634512281-Forgotten-your-password https://support.ubibot.com/hc/en-us/articles/45858811731225-Securing-your-Ubibot-account-with-two-factor-authentication 🔗 Proof]	The platform supports account security settings, password recovery and optional two-factor authentication.
Authentication	Secure	🔗 Proof	The UbiBot platform supports password authentication with optional authenticator-based two-factor authentication and recovery codes.
Brute-force protection	Basic	🔗 Proof	API request limits are documented, but login-specific brute-force protection has not been verified.
Event logging	Partial logging	🔗 Proof	The platform API documentation references channel access logs and trigger logs. Comprehensive security audit logging has not been verified.
Passwords	Require change after setup with complexity requirements	🔗 Proof	The platform supports email-based password reset, but mandatory initial password changes and password complexity requirements are not documented in the reviewed sources.
Category Score	Score: 2 / 3

Technical Specifications

Property	Details
Operating System & App	Not publicly specified (Companion App: UbiBot App)
Hardware (CPU / GPU)	CPU: Not publicly specified • GPU: Not publicly specified
Memory & Storage	Memory: Not publicly specified • Storage: Not publicly specified
Power, Battery & Charging	Battery: No built-in battery specified • Power: DC 12V / 2A • Charging: Not applicable
Display & Camera	Display: 4-inch backlit LCD • Camera: None
Sound & Connectivity	Sound: Audible leakage alarm • Connectivity: 2.4 GHz Wi-Fi, RS485, USB-C serial
Physical (Dimensions & Mass)	Dimensions: 152 × 90 × 55 mm • Mass: 426 g

The UbiBot LD1-A2L is a Wi-Fi-enabled smart water leak detector designed for continuous environmental monitoring. It supports dual-channel leak detection, local audible and visual alarms, remote cloud monitoring, and external interfaces including RS485 and relay control.

The device supports several Wi-Fi security configurations, including WPA/WPA2. However, the available product documentation does not fully establish the security of cloud communications, stored data, account authentication, or brute-force protection.

This assessment distinguishes publicly documented features from security properties that require further verification. The absence of publicly available vulnerability reports should not be interpreted as proof that the device has no vulnerabilities.

Sources: https://www.ubibot.com/ubibot-ld1/ https://www.ubibot.com/ubibot-ld1-specifications/ https://www.ubibot.com/manuals/6219/ubibot-ld1-user-guide/