CVE-2015-4400

Published: Feb 6, 2018Modified: Nov 21, 2024

4.6

Vector

CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 0.9 / Impact: 3.6

Source: NVD

Description

Ring (formerly DoorBot) video doorbells allow remote attackers to obtain sensitive information about the wireless network configuration by pressing the set up button and leveraging an API in the GainSpan Wi-Fi module.

Affected (1)

Products: Ring: Ring Firmware

Ring

1 product

Ring Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ring Ring Firmware	All versions

Running on/with	Platform Versions
Ring Ring	All versions

Related CWEs

CWE-255

References (6)

https://blog.fortinet.com/2016/01/22/cve-2015-4400-backdoorbot-network-configuration-leak-on-a-connected-doorbell

Source: cve@mitre.org

Broken Link

https://fortiguard.com/zeroday/FG-VD-15-021

Source: cve@mitre.org

Third Party Advisory

https://www.pentestpartners.com/security-blog/steal-your-wi-fi-key-from-your-doorbell-iot-wtf/

Source: cve@mitre.org

Third Party Advisory

https://blog.fortinet.com/2016/01/22/cve-2015-4400-backdoorbot-network-configuration-leak-on-a-connected-doorbell

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

https://fortiguard.com/zeroday/FG-VD-15-021

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://www.pentestpartners.com/security-blog/steal-your-wi-fi-key-from-your-doorbell-iot-wtf/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.