CVEvulnerability
CVE-2019-9483
9.1 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2019-03-01
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 9.1 CRITICAL — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
- CVSS 2.0 ([email protected])
- 6.4 MEDIUM — AV:N/AC:L/Au:N/C:P/I:P/A:N
- Weaknesses
- CWE-327
Description
Amazon Ring Doorbell before 3.4.7 mishandles encryption, which allows attackers to obtain audio and video data, or insert spoofed video that does not correspond to the actual person at the door.
Affected configurations
• amazon ring video doorbell firmware (< 3.4.7)
Related
Weakness · CWE (1)
- CWE-327 Use of a Broken or Risky Cryptographic Algorithm weakness
References
- https://dojo.bullguard.com/dojo-by-bullguard/blog/ring/ Third Party Advisory
- https://www.theverge.com/2019/2/27/18243296/ring-doorbell-hacked-fake-images-security-experts Third Party Advisory
- https://dojo.bullguard.com/dojo-by-bullguard/blog/ring/ Third Party Advisory
- https://www.theverge.com/2019/2/27/18243296/ring-doorbell-hacked-fake-images-security-experts Third Party Advisory