Ring Video Doorbell (2020)

Ring Video Doorbell (2020)
Security Grade A- Calculator v	Ring Video Doorbell (2nd Generation, 2020 release) Brand: Ring Category: Video doorbell / smart doorbell camera • Model / Gen: 2nd Generation (2020 release) Video Doorbell (2nd Gen, 2020) Release Date: 2020-01-02 • Status: In sale Classification Date: • Official Website

Security Evaluation

1. Device Security

Criterion	Value	Proof	Comment
Known hardware tampering	Rare	🔗 Proof	Outdoor doorbell mounted with security screws; physical removal is a local tampering surface; Rare is an exposure judgment.
Known vulnerabilities	Rare	🔗 Proof	CVE-2015-4400 affects legacy Ring/DoorBot video doorbells (GainSpan Wi-Fi module setup-button info exposure); it predates this 2020 model and is cited as platform history, not a current-model vulnerability.
Prior attacks	Very common	🔗 Proof	Widely reported Ring account takeovers and the 2023 FTC settlement concern the Ring account/platform layer (reused passwords, weak protections), not a device-firmware exploit on this 2020 model; platform-level history.
Updatability	Very common	[1] 🔗 Proof	Ring devices receive automatic over-the-air security updates; update support duration is listed per device in Ring Control Center.
Category Score	Score: 2 / 3

2. System Security

Criterion	Value	Proof	Comment
Authentication with other systems	Partial	🔗 Proof	Doorbell links to a Ring/Amazon account and Alexa; E2EE device enrollment requires a direct local key exchange, but the default profile does not assert full mutual authentication with every integrated system.
Communications	Encrypted with up-to-date encryption	[2] 🔗 Proof	Ring uses TLS and SRTP for device-to-cloud communication and AES for videos in transit and at rest; default cloud communication is encrypted.
Storage	No encryption	🔗 Proof	Cloud recordings are encrypted at rest (AES); the doorbell's internal flash is not documented as user-accessible or fully encrypted, hence Partial.
Category Score	Score: 2 / 3

3. User Authentication

Criterion	Value	Proof	Comment
Account management	Full	🔗 Proof	Ring app manages the account, shared users, device pairing, removal and password changes.
Authentication	Secure	🔗 Proof	Ring has required Two-Step Verification for all account sign-ins since February 2020, so account authentication is rated Secure.
Brute-force protection	Exist	🔗 Proof	Mandatory Two-Step Verification and Compromised Password Checks block credential stuffing; protection is assessed as Exist.
Event logging	Access event logged	🔗 Proof	The Ring app records doorbell presses, motion events and live-view sessions in the device event history; access events are logged.
Passwords	Require change after setup with complexity requirements	🔗 Proof	Setup requires creating a Ring account password; Compromised Password Checks notify users of weak or reused passwords, so credentials must be set with complexity and checked against known-bad lists.
Category Score	Score: 1 / 3

Technical Specifications

Property	Details
Operating System & App	Ring device firmware; automatic over-the-air security updates (Companion App: Ring app (iOS/Android); works with Alexa)
Hardware (CPU / GPU)	CPU: • GPU:
Memory & Storage	Memory: • Storage:
Power, Battery & Charging	Battery: Built-in rechargeable battery • Power: Internal battery; optional hardwire 8-24 VAC (40 VA max) or Solar Mount • Charging: Micro USB charging cable included in the box
Display & Camera	Display: • Camera: 1080p HD camera, color night vision; 155° horizontal × 90° vertical field of view
Sound & Connectivity	Sound: Two-way audio with built-in speaker and noise cancellation • Connectivity: Wi-Fi 802.11 b/g/n 2.4 GHz
Physical (Dimensions & Mass)	Dimensions: 2.4 × 4.98 × 1.10 in (62 × 126.5 × 28 mm) • Mass:

Documentation-based security assessment: Ring Video Doorbell (2nd Generation, 2020 release). Reviewed 2026-10-24.

Documentation-based assessment of a defined Ring Video Doorbell (2nd Gen, 2020) profile. The doorbell is paired through the Ring app to a user Ring/Amazon account; first setup requires creating that account and its password, and Ring has required Two-Step Verification for all account sign-ins since February 2020. Device-to-cloud communication uses TLS and SRTP, and videos are encrypted in transit and at rest with AES; opt-in End-to-End Encryption is available but is not declared as enabled in this profile. The doorbell runs on a built-in rechargeable battery (optionally hardwired 8-24 VAC) and connects over 2.4 GHz Wi-Fi. Firmware updates are delivered automatically over the air. These are the explicitly selected conditions of this document assessment, not a claim about factory defaults or an inspected physical unit.

Ratings map documented capabilities and the stated configuration to WikiIoT choices. Rare is a qualitative assessment of documented bounded exposure/history, not a measured frequency. Prior attacks is explicitly platform/account-level history: the widely reported Ring account takeovers and the 2023 FTC settlement concern the Ring account layer (reused passwords and weak protections), not a device-firmware exploit on this 2020 model, and this assessment does not identify the unit as a confirmed victim. An encrypted device-to-cloud path is rated Full for communications. Internal flash storage encryption is not documented, so local storage is rated Partial. Optional capabilities (such as E2EE) are not treated as enabled unless the assessment configuration states so. Historical CVEs do not imply that current firmware remains vulnerable.

Release-date scope: 2020, as stated on the official Ring support page ("released 2020"); a more precise day is not published by Ring and is not asserted here.

Historical vulnerability: CVE-2015-440, affecting legacy Ring (formerly DoorBot) video doorbells where pressing the set-up button and using the GainSpan Wi-Fi module API allowed remote attackers to obtain wireless-network configuration details. This CVE concerns pre-2020 legacy hardware and is cited as platform history; it does not identify the 2020 second-generation model as affected, and current patched firmware is assumed not to carry it.

No physical device was tested. Keep the configuration and evidence scope with the ratings.

References: Ring Video Doorbell (2nd Gen) support page Ring End-to-End Encryption whitepaper, 2021-07-13 (PDF) NVD CVE-2015-440 — Ring/DoorBot doorbell Wi-Fi config exposure FTC press release — Ring settlement, 2023-05-31 Ring privacy — encryption of recordings in transit and at rest WikiIoT methodology