PT-2019-19676 · Amazon · Amazon Ring Doorbell

Publicado 2019-03-01 · Atualizado 2021-07-21 · CVE-2019-9483

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Amazon Ring Doorbell versions prior to 3.4.7

Description The issue concerns the mishandling of encryption, allowing attackers to obtain audio and video data or insert spoofed video that does not correspond to the actual person at the door.

Recommendations For versions prior to 3.4.7, update to version 3.4.7 or later to resolve the issue.

Correção

Use of a Broken Cryptographic Algorithm

Enumeração de Fraquezas

CWE-327

Identificadores relacionados

CVE-2019-9483

Produtos afetados

Amazon Ring Doorbell

Referências · 4

• https://osv.dev/vulnerability/CVE-2019-9483 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-9483 · Nota de Segurança
• https://dojo.bullguard.com/dojo-by-bullguard/blog/ring · Nota
• https://theverge.com/2019/2/27/18243296/ring-doorbell-hacked-fake-images-security-experts · Nota