August Smart Lock Pro (3rd Gen)

From Wiki-IoT
Revision as of 12:23, 25 October 2026 by QF20232859 (talk | contribs) (Created page with "{{Classification |name=August Smart Lock Pro (3rd Gen) |brand=August |parent_company=August Home Inc. (ASSA ABLOY) |website=https://august.com/ |release_date=2017-01-01 |gener...")
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)



August Smart Lock Pro (3rd Gen)
Security Grade
   
     B
Calculator v
August Smart Lock Pro (3rd Gen)
   Category: Smart Lock • Model / Gen: 3 AUG-SL-CON-G03

   Release Date: 2017-01-01 • Status: In sale

   Classification Date:  • Official Website

Security Evaluation

1. Device Security

Criterion Value Proof Comment
Known hardware tampering None 🔗 Proof No documented hardware tampering; lock body is physically sturdy and no exposed debug ports
Known vulnerabilities Rare 🔗 Proof CVE-2019-17098: hardcoded crypto key in Connect firmware leaks Wi-Fi password; SweynTooth BLE issue also affects August
Prior attacks None 🔗 Proof Not associated with major botnets like Mirai
Updatability Very common 🔗 Proof Regular OTA firmware updates; security vulnerability reporting program active
Category Score Score: 2 / 3

2. System Security

Criterion Value Proof Comment
Authentication with other systems Partial 🔗 Proof Cloud uses 2FA, but Berkeley research showed revoked guests could still unlock via their phone as intermediary
Communications Encrypted with obselete encryption 🔗 Proof AES-128/TLS used, but Bitdefender showed encryption key hardcoded in app, allowing Wi-Fi password eavesdropping
Storage Encrypted with up-to-date encryption 🔗 Proof Credentials stored with AES-128 encryption; bank-grade encryption claimed
Category Score Score: 2 / 3

3. User Authentication

Criterion Value Proof Comment
Account management Full 🔗 Proof Supports multiple users, guest access keys, access revocation, password change
Authentication Secure 🔗 Proof Mandatory 2FA; no hardcoded login credentials
Brute-force protection Exist 🔗 Proof Account protected by 2FA and failed-attempt controls
Event logging Partial logging 🔗 Proof App keeps activity feed of lock/unlock events but no full audit log
Passwords Require change after setup with complexity requirements 🔗 Proof No default device password; August account password required at setup
Category Score Score: 2 / 3

Technical Specifications

Property Details
Operating System & App Proprietary firmware (Companion App: August Home App)
Hardware (CPU / GPU) CPU: • GPU:
Memory & Storage Memory: • Storage:
Power, Battery & Charging Battery: 4 x AA alkaline • Power: Battery only • Charging:
Display & Camera Display: None • Camera: none
Sound & Connectivity Sound: Built-in speaker (lock sounds) • Connectivity: Bluetooth 4.2 BLE, Wi-Fi 2.4 GHz (via August Connect)
Physical (Dimensions & Mass) Dimensions: 65.4 x 120.6 mm • Mass:


Retrieved from "http://fehmijaafar.net/wiki-iot/index.php?title=August_Smart_Lock_Pro_(3rd_Gen)&oldid=10274"