Xiaomi Mi Smart Band 6 (XMSH15HM)
From Wiki-IoT
Classification
Device Category: Wearable Technology Dangerousness Rating: B
Assessment Breakdown
- Data Privacy: 3/5 (Collects health and location data)
- Network Security: 3/5 (Uses Bluetooth, relies on paired phone)
- Access Control: 3/5 (Secured by Mi Fitness app account)
- Overall Grade: B
Assessment Justification
The Xiaomi Mi Smart Band 6 is a wearable fitness tracker that communicates via Bluetooth Low Energy (BLE) to a paired smartphone. While it does not connect directly to Wi-Fi, it continuously collects sensitive health metrics (heart rate, sleep, activity). The primary security risks involve unauthorized BLE pairing, potential data leakage through the companion app, and privacy concerns regarding the handling of health data by the manufacturer's cloud servers. It requires basic security measures but poses a lower direct network threat compared to IP-based devices.
Links to Justify Assessment
- Xiaomi Security & Privacy: https://privacy.mi.com/all/
- Mozilla Privacy Not Included (Fitness Trackers): https://foundation.mozilla.org/en/privacynotincluded/categories/fitness-trackers/
- CVE Database (Xiaomi): https://www.cve.org/2
