Incorrect Access Control in Bird Home Automation D1101V-F

Executive Summary

CVE-2023-42179 is a cryptographic weakness in DoorBird smart video doorbells, specifically affecting models like the D1101V-F with firmware versions up to 000140. The vulnerability occurs during the key derivation process where the device only uses the first five characters of a 10-character password to generate encryption keys using Argon2I. This reduces the effective key space from 60 bits to 30 bits, making brute-force attacks feasible.

Useful 0 Not Useful 0

Detection Guidance

Check if your DoorBird device runs firmware versions up to 000140. Monitor network traffic for unencrypted UDP broadcasts leaking username prefixes. Test key derivation by attempting brute-force attacks on the first five password characters using Argon2I.

Useful 0 Not Useful 0

Impact Analysis

An attacker can exploit this vulnerability by eavesdropping on unencrypted UDP broadcasts to obtain the username prefix, then performing offline brute-force attacks to recover the password. Once the password is compromised, the attacker gains full control over the device, including the ability to open doors if connected to a relay. The attack can be completed in approximately 20 minutes for the first five characters and 27 days for the full password.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could potentially violate compliance with GDPR and HIPAA due to insufficient cryptographic protection of user passwords. Weak key derivation reduces security, risking unauthorized access to sensitive data or device control. Lack of rate limiting enables brute-force attacks, further compromising security standards.

Useful 0 Not Useful 0

Mitigation Strategies

Update the device firmware to version 141 or later. Implement rate limiting on authentication attempts. Isolate the device on a secure network segment to limit exposure. Disable unnecessary network services like UDP broadcasts if possible.

Useful 0 Not Useful 0