{"id":6807,"date":"2025-06-12T15:03:29","date_gmt":"2025-06-12T15:03:29","guid":{"rendered":"http:\/\/localhost\/?p=6807"},"modified":"2025-06-12T15:03:29","modified_gmt":"2025-06-12T15:03:29","slug":"insecure-device-pairing-in-end-of-life-amazon-cloud-cam","status":"publish","type":"post","link":"https:\/\/zero.redgem.net\/?p=6807","title":{"rendered":"Insecure device pairing in end of life Amazon Cloud Cam"},"content":{"rendered":"
\n

CVE Details<\/h2>\n
\n
\n

Basic Information<\/h3>\n\n\n\n\n\n
Title<\/th>\nInsecure device pairing in end of life Amazon Cloud Cam<\/td>\n<\/tr>\n
Type<\/th>\ncve<\/td>\n<\/tr>\n
Published<\/th>\n2025-06-12T19:29:11.082Z<\/td>\n<\/tr>\n
Last Seen<\/th>\n<\/td>\n<\/tr>\n<\/table>\n<\/div>\n
\n

Product Information<\/h3>\n\n\n\n\n
Vendor<\/th>\nAmazon<\/td>\n<\/tr>\n
Product<\/th>\nCloud Cam<\/td>\n<\/tr>\n
Version<\/th>\n0<\/td>\n<\/tr>\n<\/table>\n<\/div>\n<\/div>\n
\n

CVSS Information<\/h3>\n\n\n\n\n\n\n
Base Score<\/th>\n7.7 (HIGH)<\/td>\n<\/tr>\n
Attack Vector<\/th>\nCVSS:4.0\/AV:A\/AC:H\/AT:N\/PR:N\/UI:N\/VC:H\/VI:H\/VA:H\/SC:N\/SI:N\/SA:N<\/td>\n<\/tr>\n
Confidentiality Impact<\/th>\n<\/td>\n<\/tr>\n
Integrity Impact<\/th>\n<\/td>\n<\/tr>\n
Availability Impact<\/th>\n<\/td>\n<\/tr>\n<\/table>\n<\/div>\n
\n

AI Analysis<\/h3>\n\n\n\n\n\n\n
AI Description<\/th>\nThe Amazon Cloud Cam, a deprecated home security camera, defaults to an insecure pairing mode that allows arbitrary users to bypass SSL pinning and associate the device with any network, enabling network traffic interception and modification. This vulnerability exists because the device attempts to connect to a deprecated remote service infrastructure. Customers are advised to discontinue using Amazon Cloud Cams.<\/td>\n<\/tr>\n
AI Severity<\/th>\nMedium<\/td>\n<\/tr>\n
Vendor<\/th>\nAmazon<\/td>\n<\/tr>\n
Product<\/th>\nCloud Cam<\/td>\n<\/tr>\n
Affected Version<\/th>\n0<\/td>\n<\/tr>\n<\/table>\n<\/div>\n
\n

Affected Products<\/h4>\n