{"id":"CVE-2015-4400","aliases":["EUVD-2015-4423","GHSA-jpmj-x4f8-38xj"],"status":"published","title":"Ring (formerly DoorBot) video doorbells allow remote attackers to obtain sensitive information...","description":"Ring (formerly DoorBot) video doorbells allow remote attackers to obtain sensitive information about the wireless network configuration by pressing the set up button and leveraging an API in the GainSpan Wi-Fi module.","severity":{"version":"3.0","score":4.6,"vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00639,"percentile":0.50909,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-255"],"published":"2018-02-06T16:00:00Z","modified":"2026-06-17T00:27:14Z","products":[{"vendor":"ring","product":"ring_firmware"}],"references":[{"url":"https://fortiguard.com/zeroday/FG-VD-15-021","tags":["x_refsource_MISC","x_transferred","Third Party Advisory"]},{"url":"https://www.pentestpartners.com/security-blog/steal-your-wi-fi-key-from-your-doorbell-iot-wtf/","tags":["x_refsource_MISC","x_transferred","Third Party Advisory"]},{"url":"https://blog.fortinet.com/2016/01/22/cve-2015-4400-backdoorbot-network-configuration-leak-on-a-connected-doorbell","tags":["x_refsource_MISC","x_transferred","Broken Link"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-4400"},{"url":"https://github.com/advisories/GHSA-jpmj-x4f8-38xj"}],"sources":{"cve":[{"id":"CVE-2015-4400","description":"Ring (formerly DoorBot) video doorbells allow remote attackers to obtain sensitive information about the wireless network configuration by pressing the set up button and leveraging an API in the GainSpan Wi-Fi module.","status":"published","published":"2018-02-06T16:00:00Z","modified":"2024-08-06T06:11:12.912Z","updated_at":"2026-11-02T14:35:43.698357Z"}],"euvd":[{"id":"EUVD-2015-4423","description":"Ring (formerly DoorBot) video doorbells allow remote attackers to obtain sensitive information about the wireless network configuration by pressing the set up button and leveraging an API in the GainSpan Wi-Fi module.","status":"published","published":"2018-02-06T16:00:00Z","modified":"2024-08-06T06:11:12Z","updated_at":"2026-11-03T02:22:04.101765Z"}],"ghsa":[{"id":"GHSA-jpmj-x4f8-38xj","title":"Ring (formerly DoorBot) video doorbells allow remote attackers to obtain sensitive information...","description":"Ring (formerly DoorBot) video doorbells allow remote attackers to obtain sensitive information about the wireless network configuration by pressing the set up button and leveraging an API in the GainSpan Wi-Fi module.","status":"published","published":"2022-05-14T03:38:27Z","modified":"2023-02-02T05:08:21Z","cvss":[{"version":"3.0","score":4.6,"vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T14:52:43.659612Z"}],"nvd":[{"id":"CVE-2015-4400","description":"Ring (formerly DoorBot) video doorbells allow remote attackers to obtain sensitive information about the wireless network configuration by pressing the set up button and leveraging an API in the GainSpan Wi-Fi module.","status":"published","published":"2018-02-06T16:29:00.527Z","modified":"2026-06-17T00:27:14.043Z","cvss":[{"version":"3.0","score":4.6,"vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":2.1,"vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-255"],"updated_at":"2026-11-02T14:03:19.244941Z"}]}}