(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
| Roborock S7 MaxV Ultra
|
|
Security Grade
Calculator v
|
Roborock S7 MaxV Ultra Robot Vacuum and Mop (with RockDock Ultra)
Release Date: 2022-03-01 • Status: In sale
|
Security Evaluation
1. Device Security
| Criterion
|
Value
|
Proof
|
Comment
|
| Known hardware tampering
|
Rare
|
🔗 Proof
|
The robot has physical buttons and internal sensors; independent research (Giese, DEFCON 29) found locked UART, RPMB-backed secure boot and DM-Verity on this S-generation, raising disassembly-level tampering cost.
|
| Known vulnerabilities
|
Rare
|
🔗 Proof
|
No unauthenticated remote CVE specifically for Roborock S7 MaxV Ultra was found; the widely reported 2024 camera CVEs (e.g. CVE-2024-52327/31) affect ECOVACS, not Roborock.
|
| Prior attacks
|
None
|
🔗 Proof
|
The documented 2024 smart-vacuum hijackings used reused credentials against ECOVACS Deebots, not Roborock; no confirmed Roborock compromise event. Bounded review.
|
| Updatability
|
Rare
|
🔗 Proof
|
Research documents signed, encrypted OTA firmware updates with keys held in OP-TEE/TrustZone and SELinux enforcing; no actively exploited update-chain flaw was identified for this model.
|
| Category Score
|
Score: 2 / 3
|
2. System Security
| Criterion
|
Value
|
Proof
|
Comment
|
| Authentication with other systems
|
Partial
|
🔗 Proof
|
Control is anchored to the Roborock app account, with Alexa, Google Home and Siri Shortcuts voice integration, but no deep third-party identity federation.
|
| Communications
|
Encrypted with up-to-date encryption
|
🔗 Proof
|
Roborock states obstacle photos are saved on the robot in encrypted form and the cloud acts only as a temporary channel; app traffic uses TLS. Independent verification of key handling is limited.
|
| Storage
|
Encrypted with up-to-date encryption
|
🔗 Proof
|
Research found LUKS-encrypted partitions, SELinux enforcement and on-device encrypted obstacle images; floor-plan maps remain on the robot rather than exposed.
|
| Category Score
|
Score: 2 / 3
|
3. User Authentication
| Criterion
|
Value
|
Proof
|
Comment
|
| Account management
|
Basic
|
🔗 Proof
|
Operation requires a Roborock app account, but the device exposes no rich multi-user, guest-role or on-device access management; account-side controls are thin.
|
| Authentication
|
Basic
|
🔗 Proof
|
There is no on-device login; control relies on the Roborock cloud account, with on-device encryption and secure boot rather than a device-side authentication surface.
|
| Brute-force protection
|
Absent
|
🔗 Proof
|
The robot presents no local credential surface to brute-force; any resistance depends on the Roborock cloud account, whose rate-limiting/2FA was not documented in reviewed sources.
|
| Event logging
|
Partial logging
|
🔗 Proof
|
The Roborock app shows cleaning history, maps and schedules, but there is no device-side security access audit log of who controlled the robot.
|
| Passwords
|
Require change after setup
|
🔗 Proof
|
There is no default device password; a personal Roborock account is created at first setup (app required). Per methodology this is the mid-tier first-setup provisioning case.
|
| Category Score
|
Score: 3 / 3
|
Technical Specifications
| Property
|
Details
|
| Operating System & App
|
Proprietary Roborock embedded OS (Android-based per independent research; OTA-updated via Roborock app) (Companion App: Roborock app (iOS/Android); works with Amazon Alexa, Google Home, Siri Shortcuts)
|
| Hardware (CPU / GPU)
|
CPU: Not applicable (not published in official datasheet; independent research indicates an Allwinner quad-core SoC in this S-generation) • GPU: Not applicable (not published by Roborock)
|
| Memory & Storage
|
Memory: Not applicable (official datasheet does not state RAM; research indicates ~1 GB in S-generation) • Storage: Not applicable (not published; maps and obstacle images stored on robot, encrypted)
|
| Power, Battery & Charging
|
Battery: 5200 mAh lithium-ion; up to 180 min runtime • Power: 74 W rated • Charging: Via RockDock Ultra base; charging time < 4 h
|
| Display & Camera
|
Display: No display; physical buttons and status LEDs on robot • Camera: ReactiveAI 2.0 front camera with structured-light obstacle recognition (on-device processing)
|
| Sound & Connectivity
|
Sound: Built-in speaker for voice prompts • Connectivity: Wi-Fi (2.4 GHz per third-party spec; app-controlled), Roborock cloud
|
| Physical (Dimensions & Mass)
|
Dimensions: Robot 353 x 350 x 96.5 mm; dock 422 x 493 x 420 mm • Mass: Not published on official datasheet (third-party listings cite ~4.7 kg robot; not vendor-confirmed)
|
The Roborock S7 MaxV Ultra is a 5100 Pa LiDAR robot vacuum-mop with ReactiveAI 2.0 vision, a 5200 mAh battery and a self-washing RockDock Ultra dock. Independent research (Giese, DEFCON 29) documents strong hardware-rooted controls on this S-generation: secure boot with RPMB, DM-Verity, SELinux, LUKS encryption and signed OTA firmware. No unauthenticated remote CVE is assigned to this model; the high-profile 2024 camera flaws affected ECOVACS. Residual concerns are account-layer authentication, absence of device-side brute-force protection and limited independent verification of cloud key handling.
