CVE-2025-6031
Scope: Amazon Content Type: Informational Publication Date: 2025/06/12 10:30 AM PDT Description Amazon Cloud Cam is a home security camera that was deprecated on December 2, 2022, is end of life, and is no longer actively supported. When a user powers on the Amazon Cloud Cam, the device attempts to connect to a remote service infrastructure that has been deprecated due to end-of-life status. The device defaults to a pairing status in which an arbitrary user can bypass SSL pinning to associate the device to an arbitrary network, allowing for network traffic interception and modification. Affected version: All
CSIRTS triage
- What
- The end-of-life Cloud Cam allows insecure device pairing, enabling network traffic interception.
- Who is affected
- Users of the Amazon Cloud Cam, which is no longer supported.
- Urgency
- Remediation is important as the device is vulnerable to network attacks.
- Action
- Discontinue use of the Amazon Cloud Cam.
AI-assisted analysis generated from the source advisory — verify against the original.
⚡ Watch CVE-2025-6031
Get an email if CVE-2025-6031 is added to CISA KEV, gains public exploit code, or a new advisory cites it — max one per day, one-click unsubscribe.
Exploitation outlook
- Low exploitation risk0.24% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 16% of all EPSS-scored CVEs.
Advisory coverage (1)
- unknownCVE-2025-6031 - Insecure device pairing in end-of-life Amazon Cloud Camaws · 2026-06-05
External references
Embed the live status
— this badge updates automatically when the KEV or exploit status changes. How to embed it →
[](https://www.csirts.com/cve/CVE-2025-6031)