Lucene search
K

4 matches found

Prion
Prion
added 2018/05/30 10:29 p.m.16 views

Design/Logic Flaw

DISPUTED Prior to 2018-04-27, the reprompt feature in Amazon Echo devices could be misused by a custom Alexa skill. The reprompt feature is designed so that if Alexa does not receive an input within 8 seconds, the device can speak a reprompt, then wait an additional 8 seconds for input; if the us...

4.3CVSS4.2AI score0.00289EPSS
Exploits1References4Affected Software5
Cvelist
Cvelist
added 2018/05/30 10:0 p.m.13 views

CVE-2018-11567

Prior to 2018-04-27, the reprompt feature in Amazon Echo devices could be misused by a custom Alexa skill. The reprompt feature is designed so that if Alexa does not receive an input within 8 seconds, the device can speak a reprompt, then wait an additional 8 seconds for input; if the user still...

4AI score0.00289EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2018/05/30 12:0 a.m.2 views

PT-2018-10673 · Amazon · Alexa +1

Name of the Vulnerable Software and Affected Versions: Amazon Echo devices affected versions not specified Description: The reprompt feature in Amazon Echo devices could be misused by a custom Alexa skill, allowing an attacker to obtain transcripts of speech not intended for Alexa to process. Thi...

4.3CVSS7.1AI score0.00289EPSS
Exploits1References5
The Hacker News
The Hacker News
added 2018/04/26 3:58 p.m.1 views

Amazon Alexa Has Got Some Serious Skills—Spying On Users!

"Alexa, are you spying on me?" — aaaa.....mmmm.....hmmm.....maybe!!! Security researchers have developed a new malicious 'skill' for Amazon's popular voice assistant Alexa that can turn your Amazon Echo into a full-fledged spying device. Amazon Echo is an always-listening voice-activated smart ho...

6.8AI score
Exploits0
Rows per page
Query Builder