| Ring Video Doorbell 2
|
|
Security Grade
Calculator v
|
Ring Video Doorbell 2
Release Date: 2017-07-04 • Status: End of sale
|
Security Evaluation
1. Device Security
| Criterion
|
Value
|
Proof
|
Comment
|
| Known hardware tampering
|
Rare
|
🔗 Proof
|
|
| Known vulnerabilities
|
Rare
|
🔗 Proof
|
|
| Prior attacks
|
Rare
|
🔗 Proof
|
|
| Updatability
|
Rare
|
🔗 Proof
|
|
| Category Score
|
Score: 2 / 3
|
2. System Security
| Criterion
|
Value
|
Proof
|
Comment
|
| Authentication with other systems
|
Full
|
🔗 Proof
|
|
| Communications
|
Encrypted with up-to-date encryption
|
🔗 Proof
|
|
| Storage
|
Encrypted with up-to-date encryption
|
🔗 Proof
|
|
| Category Score
|
Score: 1 / 3
|
3. User Authentication
| Criterion
|
Value
|
Proof
|
Comment
|
| Account management
|
Full
|
🔗 Proof
|
|
| Authentication
|
Secure
|
🔗 Proof
|
|
| Brute-force protection
|
Exist
|
🔗 Proof
|
|
| Event logging
|
Access event logged
|
🔗 Proof
|
|
| Passwords
|
Require change after setup with complexity requirements
|
🔗 Proof
|
|
| Category Score
|
Score: 1 / 3
|
Technical Specifications
| Property
|
Details
|
| Operating System & App
|
Embedded Linux (Companion App: Ring)
|
| Hardware (CPU / GPU)
|
CPU: ARM Cortex-A7 • GPU:
|
| Memory & Storage
|
Memory: 256MB RAM • Storage: 512MB Flash
|
| Power, Battery & Charging
|
Battery: Removable rechargeable lithium battery • Power: 5V DC or hardwired AC • Charging: USB charging for battery pack
|
| Display & Camera
|
Display: No display • Camera: 1080P camera
|
| Sound & Connectivity
|
Sound: Speaker + Microphone • Connectivity: Wi‑Fi 2.4GHz
|
| Physical (Dimensions & Mass)
|
Dimensions: 128 x 64 x 28 mm • Mass: 125g
|
Device Overview
- Manufacturer: Ring (Amazon)
- Model Number: Video Doorbell 2
- Firmware Versions affected: 1.4.3 and older
- Use-case: Battery-powered doorbell with motion detection, visitor alert, two-way audio.
Vulnerabilities & Attack Surface
- CVE ID: CVE-2020-25699
- Vulnerability description: Weak token validation during Wi-Fi provisioning. Adjacent attackers can hijack setup flow.
- Attack vector: Adjacent Wi-Fi during pairing phase.
CIA Triad Impact Analysis
- Confidentiality: Wi-Fi credentials and live visitor footage can be intercepted.
- Integrity: Attacker binds doorbell to their own Ring account.
- Availability: Malicious provisioning packets put device into boot loop.
Mitigations / Countermeasures
- 1. Upgrade firmware to latest Ring version.
- 2. Complete pairing in private network, avoid public Wi-Fi.
- 3. Enable two-factor authentication on Ring account.
- 4. Change Wi-Fi password after new device pairing.
References
[1] https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25699
[2] Ring security bulletin
