| Yeelight Smart AI Speaker (YLAI01YL) | ||
|---|---|---|
|
Security Grade
Calculator v
|
Yeelight Smart AI Speaker
Category: Smart Speaker • Model / Gen: 1 YLAI01YL Release Date: 2019-09-01 • Status: End of sale Classification Date: • Official Website | |
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Known hardware tampering | Very common | 🔗 Proof | Hardware UART debug ports are easy to access. |
| Known vulnerabilities | Rare | 🔗 Proof | Only a small number of specific physical vulnerabilities. |
| Prior attacks | Rare | 🔗 Proof | Remote attack incidents against this device are rare. |
| Updatability | Rare | 🔗 Proof | The old product model no longer receives frequent updates. |
| Category Score | Score: 3 / 3 | ||
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Authentication with other systems | Partial | 🔗 Proof | Partial verification for cloud platform connection. |
| Communications | Encrypted with up-to-date encryption | 🔗 Proof | Standard updated encryption is applied for cloud transmission. |
| Storage | Encrypted with obselete encryption | 🔗 Proof | Local data uses outdated encryption algorithms. |
| Category Score | Score: 2 / 3 | ||
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Account management | Basic | 🔗 Proof | Basic account binding and device management available. |
| Authentication | Basic | 🔗 Proof | Standard password-based user verification mechanism. |
| Brute-force protection | Basic | 🔗 Proof | Basic guessing limitation protection is included. |
| Event logging | Partial logging | 🔗 Proof | Partial login and device usage events are recorded. |
| Passwords | Require change after setup | 🔗 Proof | Users are required to change passwords during initial setup. |
| Category Score | Score: 2 / 3 | ||
| Property | Details |
|---|---|
| Operating System & App | Custom Linux (Companion App: Yeelight) |
| Hardware (CPU / GPU) | CPU: Actions S500 • GPU: None |
| Memory & Storage | Memory: 256MB • Storage: 256MB Flash |
| Power, Battery & Charging | Battery: None • Power: 12V 1A DC • Charging: Not applicable |
| Display & Camera | Display: LED indicator • Camera: None |
| Sound & Connectivity | Sound: 3W speaker, microphone array • Connectivity: Wi‑Fi 2.4G, Bluetooth |
| Physical (Dimensions & Mass) | Dimensions: 90 × 120 mm • Mass: 320g |
IDRS Grade: C. CVE-2018-20007: UART physical access can get root shell. Not exploitable remotely, only physical attackers can extract Wi-Fi credentials.
