Amazon Ring video doorbell flaw left users open to attack

  • A vulnerability in Amazon’s Ring video doorbells left the internet-of-things devices open to a variety of attacks
  • Bitdefender found that the Ring Video Doorbell Pro’s companion smartphone app sent wireless network credentials to the device in plain HTTP language during the set-up and configuration stage
  • Attackers can send these de-authentication frames at any time to a wireless device. Once the device loses its ‘heartbeat’, it automatically enters configuration mode.
  • ESET warned that many Amazon Echo and Kindle devices remained open to a different Wi-Fi vulnerability, a Key Reinstallation Attack (Krack attack)
  • A Krack attack enables the attacker to trick a device into reinstalling a key that is already in use by another device, enabling them to gain visibility of data packets crossing the network.

Leave a Reply

Your email address will not be published. Required fields are marked *