CVSS 3.0
4.6 mediumCVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NCVE-2015-4400
Medium (4.6) in ring ring firmware. EPSS 0.6% chance of exploitation in the next 30 days.
Ring (formerly DoorBot) video doorbells allow remote attackers to obtain sensitive information about the wireless network configuration by pressing the set up button and leveraging an API in the GainSpan Wi-Fi module.
Severity
- EPSS
- 0.6% chance of exploitation in the next 30 days; higher than 50% of CVEs (scores of 2026-10-31)
- CWE
- CWE-255
- Published
- Modified
- Record from
- the NVD, synced
Affected
- ring:ring_firmware
References
- https://blog.fortinet.com/2016/01/22/cve-2015-4400-backdoorbot-network-configuration-leak-on-a-connected-doorbell
- https://fortiguard.com/zeroday/FG-VD-15-021
- https://www.pentestpartners.com/security-blog/steal-your-wi-fi-key-from-your-doorbell-iot-wtf/
- https://blog.fortinet.com/2016/01/22/cve-2015-4400-backdoorbot-network-configuration-leak-on-a-connected-doorbell
- https://fortiguard.com/zeroday/FG-VD-15-021