CVE-2019-9483 - Amazon Ring Doorbell before 3.4.7 mishandles encryption, which allows attackers to obtain audio and video data, or insert spoofed video that does not correspond to the actual person at the door

Back Back to CVE browser

CRITICAL

Amazon Ring Doorbell before 3.4.7 mishandles encryption, which allows attackers to obtain audio and video data, or insert spoofed video that does not correspond to the actual person at the door

Published Mar 1, 2019

9.1

CRITICAL

CVSS 3.0

EPSS 0.59%

Description

Amazon Ring Doorbell before 3.4.7 mishandles encryption, which allows attackers to obtain audio and video data, or insert spoofed video that does not correspond to the actual person at the door.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-327

Broken Crypto Algorithm

References (2)

https://dojo.bullguard.com/dojo-by-bullguard/blog/ring/
x_refsource_MISCThird Party Advisory
https://www.theverge.com/2019/2/27/18243296/ring-doorbell-hacked-fake-images-security-experts
x_refsource_MISCThird Party Advisory

Link	Providers	Tags
https://dojo.bullguard.com/dojo-by-bullguard/blog/ring/		x_refsource_MISCThird Party Advisory
https://www.theverge.com/2019/2/27/18243296/ring-doorbell-hacked-fake-images-security-experts		x_refsource_MISCThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Mar 1, 2019

Updated Aug 4, 2024

Reserved Feb 28, 2019

Link CVE-2019-9483

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2019-9483

Red Hat

Severity n/a

Public date n/a

Links CVE-2019-9483