Loading HuntDB...

GHSA-6xmx-4966-5mwp

GitHub Security Advisory

⚠ Unreviewed HIGH Has CVE

Advisory Details

Amazon Cloud Cam is a home security camera that was deprecated on December 2, 2022, is end of life, and is no longer actively supported.

When a user powers on the Amazon Cloud Cam, the device attempts to connect to a remote service infrastructure that has been deprecated due to end-of-life status. The device defaults to a pairing status in which an arbitrary user can bypass SSL pinning to associate the device to an arbitrary network, allowing for network traffic interception and modification.

We recommend customers discontinue usage of any remaining Amazon Cloud Cams.

Related CVEs

Key Information

GHSA ID
GHSA-6xmx-4966-5mwp
Published
June 12, 2025 9:30 PM
Last Modified
June 12, 2025 9:30 PM
CVSS Score
7.5 /10
Primary Ecosystem
Unknown
Primary Package
Unknown
GitHub Reviewed
✗ No

Dataset

Last updated: June 16, 2025 6:25 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.