CVE-2015-4400

Ring (formerly DoorBot) video doorbells allow remote attackers to obtain sensitive information about the wireless network configuration by pressing the set up button and leveraging an API in the GainSpan Wi-Fi module.

• CWE-255

• https://blog.fortinet.com/2016/01/22/cve-2015-4400-backdoorbot-network-configuration-leak-on-a-connected-doorbellBroken Link
• https://fortiguard.com/zeroday/FG-VD-15-021Third Party Advisory
• https://www.pentestpartners.com/security-blog/steal-your-wi-fi-key-from-your-doorbell-iot-wtf/Third Party Advisory
• https://blog.fortinet.com/2016/01/22/cve-2015-4400-backdoorbot-network-configuration-leak-on-a-connected-doorbellBroken Link
• https://fortiguard.com/zeroday/FG-VD-15-021Third Party Advisory
• https://www.pentestpartners.com/security-blog/steal-your-wi-fi-key-from-your-doorbell-iot-wtf/Third Party Advisory

Published

Feb 6, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-4393The resource/endpoint for uploading files in the Services mo…
• CVE-2015-4394The Services module 7.x-3.x before 7.x-3.12 for Drupal allow…
• CVE-2015-4395The HybridAuth Social Login module 7.x-2.x before 7.x-2.10 f…
• CVE-2015-4396Multiple cross-site request forgery (CSRF) vulnerabilities i…
• CVE-2015-4397Cross-site request forgery (CSRF) vulnerability in the Node …
• CVE-2015-4398Open redirect vulnerability in the Chaos tool suite (ctools)…
• CVE-2015-4407Buffer overflow on Hikvision NVR DS-76xxNI-E1/2 and DS-77xxx…
• CVE-2015-4408Buffer overflow on Hikvision NVR DS-76xxNI-E1/2 and DS-77xxx…
• CVE-2015-4409Buffer overflow on Hikvision NVR DS-76xxNI-E1/2 and DS-77xxx…
• CVE-2015-4410The Moped::BSON::ObjecId.legal? method in rubygem-moped befo…7.5
• CVE-2015-4411The Moped::BSON::ObjecId.legal? method in mongodb/bson-ruby …7.5
• CVE-2015-4412BSON injection vulnerability in the legal? function in BSON …