Skip to main content

Ring doorbell security flaw opened the door to hackers

Amazon Ring fixed a security vulnerability in its Ring doorbell that could have potentially allowed hackers to get Wi-Fi passwords and access homeowners’ networks. 

The cybersecurity research company, Bitdefender, exposed the Amazon Ring flaw in a case study. The company found the vulnerability when the Ring doorbell is first configured to a Wi-Fi network. According to the case study, the initial connection allows an access point to the network without a password using HTTP. 

“Once this network is up, the app connects to it automatically, queries the device, then sends the credentials to the local network. All these exchanges are performed through plain HTTP. This means the credentials are exposed to any nearby eavesdroppers,” the case study reads. 

The hacker is able to trick the Ring device into malfunctioning, therefore causing the homeowner to try to reconfigure it, which is when a nearby hacker can slip into the network and gain access and possibly organize a larger attack against the network.

Bitdefender said that Amazon was made aware of the issue in June. A Ring spokesperson told Digital Trends that the issue has been fixed.

“Customer trust is important to us and we take the security of our devices seriously. We rolled out an automatic security update addressing the issue, and it’s since been patched,” the spokesperson told us.

A previous Ring security flaw was found earlier this year that could have allowed hackers to access video and audio from the doorbell, making it easy for a hacker to spy on the homeowner and any other member of their family. Amazon updated the Ring app to address the vulnerability.

The Amazon Ring doorbell has received other criticisms for privacy issues before, namely for its partnerships with police departments. 

In July, Motherboard reported that Amazon struck up deals with local police departments to encourage people to buy its Ring security products in exchange for free Ring video doorbells and access to a police-focused Ring portal.

A Ring spokesperson previously told Digital Trends that Ring partners with law enforcement agencies to make neighborhoods safer and that the partnership allows the community to find out about crime and safety information.

Still, many are concerned about the risks that surveillance partnerships bring. Last month, the civil rights group Fight for Future wrote a letter to elected officials calling on Amazon to stop its police partnerships. 

Fight for Future said that Amazon has not been transparent in its plans to integrate facial recognition software into its Ring cameras. The group also says the partnership poses a “serious threat to civil rights and liberties, especially for black and brown communities already targeted and surveyed by law enforcement.”

Editors' Recommendations

Allison Matyus
Former Digital Trends Contributor
Allison Matyus is a general news reporter at Digital Trends. She covers any and all tech news, including issues around social…
Ring Video Doorbell 4 vs. Nest Doorbell Wired
Ring Video Doorbell installed on a home.

If you’re looking for a new video doorbell, you’ve probably stumbled across Ring and Nest. Both companies are churning out popular smart home products, but few are as appealing as the Ring Video Doorbell 4 and Nest Doorbell Wired. The two doorbells bring heaps of functionality to the table, with plenty of crossover on their stat sheets.

But which one is best for your home? Here’s a closer look at the two video doorbells to help you make the right purchase.
Resolution and night video

Read more
History of Ring devices
Two people waving in front of a Ring Video Doorbell Wired

Ring’s smart home devices have been around for years, ever since its video doorbells were the brainchild of Jamie Siminoff and called “Doorbot.” Eventually, that name was changed to Ring, product lines grew to incorporate other devices like security cameras, and in 2018 Amazon purchase the brand.

Ring cams and doorbells in particular have continued to develop, and now there are so many models that newcomers may feel a bit bewildered by their choices. So let’s take a look at the state of these Ring lines, what products they include, and all the key differences that have developed over time.
Ring security cams
Floodlight Cam

Read more
New Ring cams get radar, fresh design, and now they can dispatch Amazon Astro’s robot
Ring Spotlight Cam Pro wired on a wall.

During Wednesday's Amazon event, Ring announced a bevy of new products to join its large lineup. These products include the new Spotlight Cam Pro, Virtual Security Guard, and new software features for older products.
Ring Spotlight Cam Pro
First up is the new Spotlight Cam Pro, focusing on using radar sensors for improved motion detection. With the new radar sensor in the camera, you can set precise thresholds on when the Cam Pro starts to record and alert you to motion. Those sensors also power the Bird's Eye View feature that will show you an estimated path someone may have followed. So, if a delivery driver dropped off a package, you can see exactly what route they took around your property. This view will show in a picture-in-picture format whether you're watching live or a past event.

Ring Spotlight Cam Plus
The next generation of the Spotlight Cam is coined Spotlight Cam Plus. It offers a new design while maintaining all the features that customers expect, including two-way talk, color night vision, live view, and a security siren. The Spotlight Cam Plus will also be available in multiple power options, including Solar, Battery Wired, and Plug-in. You can pre-order the Spotlight Cam Plus now, starting at $200.

Read more