CVE-2015-4400

Ring (formerly DoorBot) video doorbells allow remote attackers to obtain sensitive information about the wireless network configuration by pressing the set up button and leveraging an API in the GainSpan Wi-Fi module.

Score

CVSS 3.0 4.6 Medium

Status

Modified - cve@mitre.org

Published

2018-02-06

Last modified

2024-08-06

Weaknesses

CWE-255

Affected products

• Ring Firmware (Ring)

References

• https://blog.fortinet.com/2016/01/22/cve-2015-4400-backdoorbot-network-configuration-leak-on-a-connected-doorbell
• https://fortiguard.com/zeroday/FG-VD-15-021
• https://www.pentestpartners.com/security-blog/steal-your-wi-fi-key-from-your-doorbell-iot-wtf/