PT-2025-25352 · Amazon · Amazon Cloud Cam

Published 2025-06-12 · Updated 2025-10-14 · CVE-2025-6031

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Amazon Cloud Cam (affected versions not specified)

Description The issue concerns a home security camera that is no longer supported due to its end-of-life status. When powered on, the device attempts to connect to a deprecated remote service infrastructure, defaulting to a pairing status. This allows an arbitrary user to bypass SSL pinning, associate the device with any network, and potentially intercept and modify network traffic.

Recommendations Discontinue usage of any remaining Amazon Cloud Cams.

Fix

Weakness Enumeration

CWE-672

Related Identifiers

CVE-2025-6031

Affected Products

Amazon Cloud Cam

References · 10

• https://aws.amazon.com/security/security-bulletins/AWS-2025-013 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-6031 · Security Note
• https://twitter.com/AndreGironda/status/1933602197516030232 · Twitter Post
• https://twitter.com/the_yellow_fall/status/1933350802250477843 · Twitter Post
• https://twitter.com/CVEnew/status/1933247312635240810 · Twitter Post
• https://twitter.com/TweetThreatNews/status/1933654781924430086 · Twitter Post
• https://t.me/cvetracker/26129 · Telegram Post
• https://t.me/cveNotify/138622 · Telegram Post
• https://twitter.com/Komodosec/status/1946751799828127970 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1933270718168391938 · Twitter Post