Consumer Reports Inc.
04/25/2024 | Press release | Distributed by Public on 04/25/2024 13:17
Eken Fixes Security Issues in Video Doorbell Cameras after Consumer Reports Investigation
Eken Fixes Security Issues in Video Doorbell Cameras after Consumer Reports Investigation
Eken video doorbell cameras were sold by Amazon, Walmart, and other online retailers despite having serious security vulnerabilities
April 25, 2024|Tech & Privacy
WASHINGTON, DC - Consumer Reports recently uncovered security vulnerabilitiesin doorbells manufactured by Eken Group and sold by online retailers such as Amazon, Walmart, Sears, Shein, and Temu.
Following the investigation, Eken Group met with CR test engineers to learn about the issues we found and released a new firmware update to fix them. The security issues could have allowed a hacker, stalker, or other bad actor to gain control of the doorbell and view images from the doorbell camera remotely. The vulnerabilities also leaked home IP addresses and WiFi network names. The new firmware will resolve the vulnerabilities CR testers found.
In addition to the security issues, these doorbells also lacked proper Federal Communications Commission (FCC) ID labels on their packaging and/or plastic casings, which made them illegal to sell in the U.S. Eken confirmed to CR that all of its products had undergone FCC testing and certification, as CR's initial reporting indicated, and the doorbells were just missing the labels.
To be in full compliance with FCC regulations, Eken added the FCC IDs to the electronic manuals for the doorbells, which can be accessed from the Aiwit app.
As a result of CR's initial report, FCC Commissioner Geoffrey Starks sent lettersto the five retailers we found selling these doorbells-Amazon, Walmart, Sears, Shein, and Temu-asking them why they were selling insecure, non-compliant devices and what policies they have in place to address such issues. His letters asked the companies to respond by March 22, 2024, but it's unclear if any of the companies did so.
Justin Brookman, director of technology policy at Consumer Reports said, "Unfortunately, the Internet of Things is rife with bad data security practices. Even when there are rules mandating certain security practices, there's not enough awareness or enforcement to change practices industry-wide. On top of that, major e-commerce platforms like Amazon and Walmart need to do a better job of vetting sellers and products sold on their platforms, so consumers are not put at risk. It's become clear that we need new rules to hold online retailers accountable."
Due to security vulnerabilities uncovered in CR's investigation, the Eken Smart Video Doorbelland Tuck Sharkpop Doorbell Camerawere labeled as "Don't Buy: Safety Risk" in CR's video doorbell ratings. Now that the issues have been resolved, CR is removing those labels from the products and releasing their full test results.
Consumers using a video doorbell made by Eken, Tuck, Fishbot, or any of the other brands that use the same hardware and Aiwit smartphone app, should confirm that your doorbell is running the latest firmware version as soon as possible.
About Consumer Reports
Founded in 1936, CR has a mission to create a fair and just marketplace for all. Widely known for our rigorous research and testing of products and services, we also survey millions of consumers each year, report extensively on marketplace issues, and advocate for consumer rights and protections around safety as well as digital rights, financial fairness, and sustainability. CR is independent and nonprofit.
© 2024 Consumer Reports. The material above is intended for legitimate news entities only; it may not be used for advertising or promotional purposes. Consumer Reports® is an expert, independent, nonprofit organization whose mission is to work side by side with consumers to create a fairer, safer, and healthier world. We accept no advertising and pay for all the products we test. We are not beholden to any commercial interest. Our income is derived from the sale of Consumer Reports® magazine, ConsumerReports.org® and our other publications and information products, services, fees, and noncommercial contributions and grants. Our Ratings and reports are intended solely for the use of our readers. Neither the Ratings nor the reports may be used in advertising or for any other commercial purpose without our prior written permission. Consumer Reports will take all steps open to it to prevent unauthorized commercial use of its content and trademarks.