medium4.6
CVE-2015-4400
Ring (formerly DoorBot) video doorbells allow remote attackers to obtain sensitive information about the wireless network configuration by pressing the set up …
Impact
Ring (formerly DoorBot) video doorbells allow remote attackers to obtain sensitive information about the wireless network configuration by pressing the set up button and leveraging an API in the GainSpan Wi-Fi module.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ring | Ring Firmware | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- https://blog.fortinet.com/2016/01/22/cve-2015-4400-backdoorbot-network-configuration-leak-on-a-connected-doorbell
- https://fortiguard.com/zeroday/FG-VD-15-021
- https://www.pentestpartners.com/security-blog/steal-your-wi-fi-key-from-your-doorbell-iot-wtf/
- https://blog.fortinet.com/2016/01/22/cve-2015-4400-backdoorbot-network-configuration-leak-on-a-connected-doorbell
- https://fortiguard.com/zeroday/FG-VD-15-021
- https://www.pentestpartners.com/security-blog/steal-your-wi-fi-key-from-your-doorbell-iot-wtf/