Netatmo Weather Station
From Wiki-IoT
Revision as of 11:32, 25 October 2026 by QF20232859 (talk | contribs) (Created page with "{{Classification |name=Netatmo Weather Station |brand=Netatmo |parent_company=Netatmo (Legrand) |website=https://www.netatmo.com/weatherstation |release_date=2013-06-01 |gener...")
(diff) ← Older revision | Approved revision (diff) | Latest revision (diff) | Newer revision → (diff)
| Netatmo Weather Station | ||
|---|---|---|
|
Security Grade
Calculator v
|
Netatmo Weather Station
Brand: Netatmo (Parent: Netatmo (Legrand)) Category: Smart Home Weather Station • Model / Gen: 1 NWS01-WW Release Date: 2013-06-01 • Status: In sale Classification Date: • Official Website | |
Contents
Security Evaluation
1. Device Security
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Known hardware tampering | Rare | 🔗 Proof | Academic research notes physical access and RF jamming as attack vectors |
| Known vulnerabilities | Very common | 🔗 Proof | CVE-2015-1600: firmware sent full config including Wi-Fi password in cleartext during setup |
| Prior attacks | None | 🔗 Proof | Not associated with major botnets like Mirai |
| Updatability | Very common | 🔗 Proof | Automatic OTA firmware updates published regularly |
| Category Score | Score: 2 / 3 | ||
2. System Security
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Authentication with other systems | Partial | 🔗 Proof | Uses OAuth 2.0 for cloud API, but local module communication lacks strong mutual auth |
| Communications | No encryption | 🔗 Proof | CVE-2015-1600: WPA passphrase transmitted in plaintext during initial setup |
| Storage | Encrypted with obselete encryption | 🔗 Proof | User data stored on Netatmo cloud; local flash not fully documented as encrypted |
| Category Score | Score: 3 / 3 | ||
3. User Authentication
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Account management | Full | 🔗 Proof | Supports home management, user invitation, password change |
| Authentication | Basic | 🔗 Proof | OAuth-based login; no documented hardcoded root credentials |
| Brute-force protection | Basic | 🔗 Proof | Cloud API has rate limiting but no detailed lockout policy published |
| Event logging | Partial logging | 🔗 Proof | App shows device status history but not full security audit log |
| Passwords | Require change after setup | 🔗 Proof | No default device password; Netatmo account required on first setup |
| Category Score | Score: 2 / 3 | ||
Technical Specifications
| Property | Details |
|---|---|
| Operating System & App | Proprietary embedded (Companion App: Netatmo Weather App) |
| Hardware (CPU / GPU) | CPU: • GPU: |
| Memory & Storage | Memory: • Storage: |
| Power, Battery & Charging | Battery: 4 x AA batteries (outdoor module) • Power: 5V USB (indoor module) • Charging: |
| Display & Camera | Display: None (LED only) • Camera: none |
| Sound & Connectivity | Sound: none • Connectivity: Wi-Fi 802.11b/g/n, 868 MHz radio |
| Physical (Dimensions & Mass) | Dimensions: 120 x 80 x 40 mm • Mass: 200 g |
