Yeelight Smart Bath Heater Pro (YL-FB01)

Yeelight Smart Bath Heater Pro (YL-FB01)
Security Grade B Calculator v	Yeelight Smart Bath Heater Pro (YL-FB01) Brand: Yeelight (Parent: Yeelight Technology Co., Ltd. (subsidiary of Xiaomi)) Category: Smart Bathroom Heater • Model / Gen: 1st Generation YL-FB01 Release Date: 2022-10-20 • Status: In sale Classification Date: • Official Website

Security Evaluation

1. Device Security

Criterion	Value	Proof	Comment
Known hardware tampering	None	🔗 Proof	Ceiling-mounted sealed unit; physical disassembly requires tools and provides no access to user credentials.
Known vulnerabilities	None	🔗 Proof	No CVE entries have been assigned to this specific bathroom heater model.
Prior attacks	None	🔗 Proof	No publicly reported attack incidents targeting this device category.
Updatability	Rare	🔗 Proof	Firmware updates are available but infrequent; no automatic update by default.
Category Score	Score: 2 / 3

2. System Security

Criterion	Value	Proof	Comment
Authentication with other systems	Partial	🔗 Proof	Works with Google Assistant, Amazon Alexa and Apple HomeKit via cloud integration.
Communications	Encrypted with up-to-date encryption	🔗 Proof	Local LAN control and cloud synchronization use TLS 1.2 encryption.
Storage	No encryption	🔗 Proof	Only basic configuration data stored locally on device; no sensitive personal data.
Category Score	Score: 2 / 3

3. User Authentication

Criterion	Value	Proof	Comment
Account management	Basic	🔗 Proof	Standard Mi Home / Yeelight account system with device sharing.
Authentication	Basic	🔗 Proof	Password-based login; two-factor authentication is optional on Mi Home platform.
Brute-force protection	Basic	🔗 Proof	Cloud platform implements basic login rate limiting.
Event logging	Partial logging	🔗 Proof	Device operation events are logged; detailed access audit logs are not available.
Passwords	Require change after setup with complexity requirements	🔗 Proof	No default device credentials; user account password set during registration.
Category Score	Score: 2 / 3

Technical Specifications

Property	Details
Operating System & App	Proprietary embedded firmware (Companion App: Yeelight App, Mi Home App)
Hardware (CPU / GPU)	CPU: ARM Cortex-M3 microcontroller • GPU: None
Memory & Storage	Memory: 64KB RAM • Storage: 128KB internal flash
Power, Battery & Charging	Battery: None (mains powered only) • Power: 220V AC, 2800W • Charging: N/A
Display & Camera	Display: LED status indicators • Camera: None
Sound & Connectivity	Sound: No built-in speaker • Connectivity: 2.4GHz Wi-Fi (802.11 b/g/n), Bluetooth 4.2
Physical (Dimensions & Mass)	Dimensions: 30.0 × 30.0 × 18.5 cm • Mass: 4.2 kg