Security News > 2020 > November > Smart Doorbells on Amazon, eBay, Harbor Serious Security Issues

Matt Lewis, with NCC Group, talks to Threatpost about a slew of security and privacy issues found in smart doorbells that are being sold on Amazon and eBay.

Researchers have found serious security and privacy issues in 11 different smart doorbells, distributed via online marketplaces like Amazon and eBay, which could be exploited by attackers to physically switch off the devices.

Matt Lewis, research director at NCC Group, told Threatpost during this week's Threatpost podcast episode that these smart doorbells were discovered to have a slew of issues, including weak password policies, lack of data encryption and excessive collection of customer information.

Researchers, in partnership with Which?, looked at smart doorbells from Victure; Qihoo 360; Accfly.

For the smart doorbell, this vulnerability could allow an attacker to break the WPA-2 security on someone's home WiFi and ultimately gain access to their network, said researchers.

News URL

https://threatpost.com/smart-doorbells-on-amazon-ebay-harbor-serious-security-issues/161510/