CVE-2015-4400

2018-02-0616:00:00

mitre

www.cve.org

4.6 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

71.1%

JSON

Ring (formerly DoorBot) video doorbells allow remote attackers to obtain sensitive information about the wireless network configuration by pressing the set up button and leveraging an API in the GainSpan Wi-Fi module.

References

blog.fortinet.com/2016/01/22/cve-2015-4400-backdoorbot-network-configuration-leak-on-a-connected-doorbell

fortiguard.com/zeroday/FG-VD-15-021

www.pentestpartners.com/security-blog/steal-your-wi-fi-key-from-your-doorbell-iot-wtf/