PT-2019-19676 · Amazon · Amazon Ring Doorbell

Published 2019-03-01 · Updated 2021-07-21 · CVE-2019-9483

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Amazon Ring Doorbell versions prior to 3.4.7

Description The issue concerns the mishandling of encryption, allowing attackers to obtain audio and video data or insert spoofed video that does not correspond to the actual person at the door.

Recommendations For versions prior to 3.4.7, update to version 3.4.7 or later to resolve the issue.

Fix

Use of a Broken Cryptographic Algorithm

Weakness Enumeration

CWE-327

Related Identifiers

CVE-2019-9483

Affected Products

Amazon Ring Doorbell

References · 4

• https://osv.dev/vulnerability/CVE-2019-9483 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-9483 · Security Note
• https://dojo.bullguard.com/dojo-by-bullguard/blog/ring · Note
• https://theverge.com/2019/2/27/18243296/ring-doorbell-hacked-fake-images-security-experts · Note