| Samsung SmartThings Hub | ||
|---|---|---|
|
Security Grade
Calculator v
|
Samsung SmartThings Hub
Brand: Samsung (Parent: Samsung Electronics) Category: Smart home hub • Model / Gen: SmartThings Hub v3 Release Date: 2018-09-01 • Status: In sale Classification Date: • Official Website | |
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Known hardware tampering | None | 🔗 Proof | Physical tampering not documented. |
| Known vulnerabilities | Rare | 🔗 Proof | CVE-2025-2233 auth bypass (8.8); 2018 Talos buffer overflows (CVE-2018-3903..3909). |
| Prior attacks | Rare | 🔗 Proof | Cisco Talos 2018 disclosure; no large-scale campaign. |
| Updatability | Very common | 🔗 Proof | Samsung regularly updates hub firmware. |
| Category Score | Score: 2 / 3 | ||
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Authentication with other systems | Partial | 🔗 Proof | Hub Local API on port 8766 auth bypass (CVE-2025-2233). |
| Communications | Encrypted with up-to-date encryption | 🔗 Proof | Cloud and local API use TLS. |
| Storage | Encrypted with up-to-date encryption | 🔗 Proof | Internal storage encrypted. |
| Category Score | Score: 2 / 3 | ||
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Account management | Full | 🔗 Proof | Samsung account management. |
| Authentication | Secure | 🔗 Proof | Samsung account authentication. |
| Brute-force protection | Exist | 🔗 Proof | Samsung login rate limiting. |
| Event logging | Access event logged | 🔗 Proof | Activity logged in SmartThings app. |
| Passwords | Require change after setup with complexity requirements | 🔗 Proof | Samsung account password complexity. |
| Category Score | Score: 1 / 3 | ||
| Property | Details |
|---|---|
| Operating System & App | SmartThings firmware (Companion App: SmartThings app) |
| Hardware (CPU / GPU) | CPU: • GPU: |
| Memory & Storage | Memory: • Storage: Internal flash |
| Power, Battery & Charging | Battery: • Power: AC adapter • Charging: |
| Display & Camera | Display: • Camera: |
| Sound & Connectivity | Sound: • Connectivity: Wi-Fi, Zigbee, Z-Wave, Bluetooth, Ethernet |
| Physical (Dimensions & Mass) | Dimensions: • Mass: |
SmartThings Hub has a strong account layer and frequent updates, but a 2025 authentication bypass in its local API (CVE-2025-2233) plus 2018 Talos findings show recurring network-adjacent issues.
