Eken Fixes Security Issues in Video Doorbell Cameras after Consumer Reports Investigation

WASHINGTON, DC – Consumer Reports recently uncovered security vulnerabilities in doorbells manufactured by Eken Group and sold by online retailers such as Amazon, Walmart, Sears, Shein, and Temu.

Following the investigation, Eken Group met with CR test engineers to learn about the issues we found and released a new firmware update to fix them. The security issues could have allowed a hacker, stalker, or other bad actor to gain control of the doorbell and view images from the doorbell camera remotely. The vulnerabilities also leaked home IP addresses and WiFi network names. The new firmware will resolve the vulnerabilities CR testers found.

In addition to the security issues, these doorbells also lacked proper Federal Communications Commission (FCC) ID labels on their packaging and/or plastic casings, which made them illegal to sell in the U.S. Eken confirmed to CR that all of its products had undergone FCC testing and certification, as CR’s initial reporting indicated, and the doorbells were just missing the labels.

To be in full compliance with FCC regulations, Eken added the FCC IDs to the electronic manuals for the doorbells, which can be accessed from the Aiwit app. 

As a result of CR’s initial report, FCC Commissioner Geoffrey Starks sent letters to the five retailers we found selling these doorbells—Amazon, Walmart, Sears, Shein, and Temu—asking them why they were selling insecure, non-compliant devices and what policies they have in place to address such issues. His letters asked the companies to respond by March 22, 2024, but it’s unclear if any of the companies did so. 

Justin Brookman, director of technology policy at Consumer Reports said, “Unfortunately, the Internet of Things is rife with bad data security practices. Even when there are rules mandating certain security practices, there’s not enough awareness or enforcement to change practices industry-wide. On top of that, major e-commerce platforms like Amazon and Walmart need to do a better job of vetting sellers and products sold on their platforms, so consumers are not put at risk. It’s become clear that we need new rules to hold online retailers accountable.” 

Due to security vulnerabilities uncovered in CR’s investigation, the Eken Smart Video Doorbell and Tuck Sharkpop Doorbell Camera were labeled as “Don’t Buy: Safety Risk” in CR’s video doorbell ratings. Now that the issues have been resolved, CR is removing those labels from the products and releasing their full test results.

Consumers using a video doorbell made by Eken, Tuck, Fishbot, or any of the other brands that use the same hardware and Aiwit smartphone app, should confirm that your doorbell is running the latest firmware version  as soon as possible.