CVE-2019-9483

N/A

Description

Amazon Ring Doorbell before 3.4.7 mishandles encryption, which allows attackers to obtain audio and video data, or insert spoofed video that does not correspond to the actual person at the door.

CVE Details

CVSS v3.1 ScoreN/A

Published3/1/2019

Last Modified11/21/2024

Sourcenvd

Honeypot Sightings0

Affected Products

amazon:ring_video_doorbellamazon:ring_video_doorbell_firmware

Weaknesses (CWE)

CWE-327

References

https://dojo.bullguard.com/dojo-by-bullguard/blog/ring/(cve@mitre.org)

https://www.theverge.com/2019/2/27/18243296/ring-doorbell-hacked-fake-images-security-experts(cve@mitre.org)

https://dojo.bullguard.com/dojo-by-bullguard/blog/ring/(af854a3a-2127-422b-91ae-364da2661108)

https://www.theverge.com/2019/2/27/18243296/ring-doorbell-hacked-fake-images-security-experts(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.