CVE-2019-9483

Amazon Ring Doorbell before 3.4.7 mishandles encryption, which allows attackers to obtain audio and video data, or insert spoofed video that does not correspond to the actual person at the door.

Score

CVSS 3.0 9.1 Critical

Status

Modified - cve@mitre.org

Published

2019-03-01

Last modified

2024-08-04

Weaknesses

CWE-327

Affected products

• Ring Video Doorbell Firmware (Amazon)

References

• https://dojo.bullguard.com/dojo-by-bullguard/blog/ring/
• https://www.theverge.com/2019/2/27/18243296/ring-doorbell-hacked-fake-images-security-experts