Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

Amit Ashbel

Researcher fromCheckmarx
#57858of 60,596
4.3Total CVSS
Vulnerabilities · 1
PT-2018-10673
2018-05-30
4.3
CVE-2018-11567
Amazon
Alexa
The reprompt feature in Amazon Echo devices could be misused by a custom Alexa skill, allowing an attacker to obtain transcripts of speech not intended for Alexa to process. This issue involves empty output-speech reprompts, custom wildcard input slots, and logging of detected speech. If a maliciously designed skill is installed, it could capture speech spoken within the device's hearing range.