CSIRTS // UNIFIED SECURITY ADVISORY FEEDSYS ● ONLINE · POWERED BY INTELFUSIONS.COM

← Back to feed

CVE-2025-6031 - Insecure device pairing in end-of-life Amazon Cloud Cam

unknownCVE-2025-6031
Scope: Amazon Content Type: Informational Publication Date: 2025/06/12 10:30 AM PDT Description Amazon Cloud Cam is a home security camera that was deprecated on December 2, 2022, is end of life, and is no longer actively supported. When a user powers on the Amazon Cloud Cam, the device attempts to connect to a remote service infrastructure that has been deprecated due to end-of-life status. The device defaults to a pairing status in which an arbitrary user can bypass SSL pinning to associate the device to an arbitrary network, allowing for network traffic interception and modification. Affected version: All

CSIRTS triage

vendor: Amazonproduct: Cloud CamOtheraffected: All
What
The end-of-life Cloud Cam allows insecure device pairing, enabling network traffic interception.
Who is affected
Users of the Amazon Cloud Cam, which is no longer supported.
Urgency
Remediation is important as the device is vulnerable to network attacks.
Action
Discontinue use of the Amazon Cloud Cam.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch Cloud Cam

Get an email when a new Cloud Cam advisory drops — max one per day, one-click unsubscribe.

Details

Source
AWS Security Bulletins (INTL · vendor-psirt · site)
Severity
unknown
Published
2026-06-05
Exploitation
Not in CISA KEV at last sync

Original advisory: https://aws.amazon.com/security/security-bulletins/rss/aws-2025-013/

Exploitation outlook

EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.

Referenced CVEs

CVECSIRTS overviewExternal
CVE-2025-6031coverage & exploitation statusNVD · CVE.org

More from AWS Security Bulletins