Approved changes feed: RSS · Atom

cpe:2.3:h:amazon:echo_dot:3.0:*:*:*:*:*:*:*

part: h version: 3.0 update: *

VendorAmazon (0ed129a9-8e26-53dc-aefe-55957e638c30)
ProductEcho Dot (bafe9ec9-2629-5dfa-be84-a4a4944b7111)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-25809 not_vulnerable 2026-06-08 05:41:49.496280 Details available
Improper Neutralization of audio output from 3rd and 4th Generation Amazon Echo Dot devices allows arbitrary voice command execution on these devices via a malicious skill (in the case of remote attackers) or by pairing a malicious Bluetooth device (in the case of physically proximate attackers), aka an "Alexa versus Alexa (AvA)" attack.
Published: 2022-02-23T02:19:52.000Z
Updated: 2024-08-03T04:49:43.749Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.