Google OnHub

• info_outlineEvaluation Details

  Device	Mobile Application
  Vendor: Google	Target Platform: Android
  Model: OnHub	Package Name: com.google.android.apps.access.wifi.consumer
  Firmware Version: 10032.86.0	Package Version: jetstream-BV10127_RC0011
  Evaluation Date: 03/21/2018	Evaluation Date: 01/24/2018

• router Device Score - 88.1% (B)

  Property	Score	Why is this important?
  Internet Pairing (?)	1/3	Explainchevron_right
  Configuration (?)	0/7	Explainchevron_right
  Upgradability (?)	0/4	Explainchevron_right
  Exposesed Services (?)	2/4	Explainchevron_right
  Vulnerabilities Low (CVSS) (?)	0/3	Explainchevron_right
  Vulnerabilities Medium (CVSS) (?)	2/4	Explainchevron_right
  Vulnerabilities High (CVSS) (?)	0/7	Explainchevron_right
  Vulnerabilities Critical (CVSS) (?)	0/10	Explainchevron_right
  Total	5/42	Total score for the device component, higher is worst

• phone_android Mobile Score - 69.23% (D)

  Property	Score	Why is this important?
  Sensitive Data (?)	0/6	Explainchevron_right
  Programming Errors (?)	2/4	Explainchevron_right
  Excess Permissions (?)	2/3	Explainchevron_right
  Total	4/13	Total score for the device component, higher is worst

• cloud_queue Cloud Score - 97.83% (A)

  Property	Score	Why is this important?
  First-party endpoints (?)	2/3	Explainchevron_right
  Third-party endpoints (?)	0/5	Explainchevron_right
  Hybrid endpoints (?)	0/4	Explainchevron_right
  Self-Signed Certificates (?)	0/10	Explainchevron_right
  Name Mismatch on Certificate (?)	0/10	Explainchevron_right
  Vulnerable TLS/SSL version (?)	0/10	Explainchevron_right
  Unsupported OS (?)	0/11	Explainchevron_right
  Information Disclosure (?)	0/12	Explainchevron_right
  Cleartext Authentication (?)	0/13	Explainchevron_right
  Exploitable Services (?)	0/14	Explainchevron_right
  Total	2/92	Total score for the device component, higher is worst

• device_hub Network Score - 78.57% (C)

  Property	Score	Why is this important?
  Third-party DNS (?)	2/2	Explainchevron_right
  HTTP (?)	0/1	Explainchevron_right
  UPnP (?)	0/2	Explainchevron_right
  NTPv3 (?)	0/1	Explainchevron_right
  Custom Protocol (?)	2/2	Explainchevron_right
  MITM Device-to-Cloud (?)	0/4	Explainchevron_right
  MITM Mobile-to-Cloud (?)	0/4	Explainchevron_right
  MITM Mobile-to-Device (?)	0/2	Explainchevron_right
  Encryption Device-to-Cloud (?)	2/4	Explainchevron_right
  Encryption Mobile-to-Cloud (?)	0/4	Explainchevron_right
  Encryption Mobile-to-Device (?)	0/2	Explainchevron_right
  Total	6/28	Total score for the device component, higher is worst