CVE-2019-9483

N/A

Descricao

Amazon Ring Doorbell before 3.4.7 mishandles encryption, which allows attackers to obtain audio and video data, or insert spoofed video that does not correspond to the actual person at the door.

Detalhes CVE

Pontuacao CVSS v3.1N/A

Publicado3/1/2019

Ultima modificacao11/21/2024

Fontenvd

Avistamentos honeypot0

Produtos afetados

amazon:ring_video_doorbellamazon:ring_video_doorbell_firmware

Fraquezas (CWE)

CWE-327

Referencias

https://dojo.bullguard.com/dojo-by-bullguard/blog/ring/(cve@mitre.org)

https://www.theverge.com/2019/2/27/18243296/ring-doorbell-hacked-fake-images-security-experts(cve@mitre.org)

https://dojo.bullguard.com/dojo-by-bullguard/blog/ring/(af854a3a-2127-422b-91ae-364da2661108)

https://www.theverge.com/2019/2/27/18243296/ring-doorbell-hacked-fake-images-security-experts(af854a3a-2127-422b-91ae-364da2661108)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.