[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fzsag7u_84NL_zagVPjI9XXxE5S9_ocymG4TqOJ4m57U":3,"g5a-risk:CVE-2022-25809":116},{"success":4,"data":5,"meta":114},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":40,"epssPercentile":27,"epssTimeSeries":41,"severity":42,"affectedProducts":43,"affectedProductsCount":56,"references":57,"referencesCount":65,"weaknesses":66,"weaknessesCount":65,"isActivelyExploited":70,"cisaInfo":27,"otxData":27,"relatedBlogPosts":71,"seoMetadata":72,"configurations":97,"relatedVendorCves":112,"notableEvents":113},"CVE-2022-25809","What is CVE-2022-25809?","Improper Neutralization of audio output from 3rd and 4th Generation Amazon Echo Dot devices allows arbitrary voice command execution on these devices via a malicious skill (in the case of remote attackers) or by pairing a malicious Bluetooth device (in the case of physically proximate attackers), aka an \"Alexa versus Alexa (AvA)\" attack.","Improper Neutralization of audio output from 3rd and 4th Generation Amazon Echo Dot devices allows arbitrary voice command execution on these devices via a m...","2022-02-24T15:15:32.94","2023-08-08T14:22:24.967",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":27,"CVSSMetricV2":30,"CVSSMetricV40":27},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":25,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",null,3.9,5.9,[31],{"Source":17,"Type":18,"CVSSData":32,"BaseSeverity":25,"ExploitabilityScore":38,"ImpactScore":39,"ACInsufInfo":27,"ObtainAllPrivilege":27,"ObtainUserPrivilege":27,"ObtainOtherPrivilege":27,"UserInteractionRequired":27},{"Version":33,"VectorString":34,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":35,"IntegrityImpact":35,"AvailabilityImpact":36,"BaseScore":37,"BaseSeverity":27,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:C","PARTIAL","COMPLETE",9,10,8.5,0.0326,[40,40,40,40,40,40,40],"Critical",[44,49,53],{"vendor":45,"product":46,"version":47,"criteria":48,"vulnerable":4},"amazon","echo_dot_firmware","-","cpe:2.3:o:amazon:echo_dot_firmware:-:*:*:*:*:*:*:*",{"vendor":45,"product":50,"version":51,"criteria":52,"vulnerable":4},"echo_dot","3.0","cpe:2.3:h:amazon:echo_dot:3.0:*:*:*:*:*:*:*",{"vendor":45,"product":50,"version":54,"criteria":55,"vulnerable":4},"4.0","cpe:2.3:h:amazon:echo_dot:4.0:*:*:*:*:*:*:*",3,[58],{"url":59,"source":60,"tags":61},"https:\u002F\u002Farxiv.org\u002Fabs\u002F2202.08619","Arxiv",[62,63,64],"Exploit","Technical Description","Third Party Advisory",1,[67],{"id":68,"name":68,"description":69},"Unknown","NVD-CWE-Other",false,[],{"title":73,"metaDescription":74,"keywords":75,"canonicalUrl":76,"structuredData":77},"What is CVE-2022-25809? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2022-25809, a critical severity cyber security vulnerability from 2022. Improper Neutralization of audio output from 3rd and 4t...","CVE-2022-25809, CVE-2022-25809 vulnerability, CVE-2022-25809 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2022, CVSS score, exploit, patch, remediation, amazon security, echo_dot_firmware vulnerability, echo_dot vulnerability","\u002Fwhat-is\u002Fcve-2022-25809",{"@context":78,"@type":79,"headline":73,"description":74,"datePublished":10,"dateModified":11,"author":80,"publisher":84,"about":88,"mainEntityOfPage":92,"articleSection":95,"keywords":96},"https:\u002F\u002Fschema.org","TechArticle",{"@type":81,"name":82,"url":83},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":81,"name":82,"url":83,"logo":85},{"@type":86,"url":87},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":89,"name":6,"description":90,"additionalType":91},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":93,"@id":94},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2022-25809","Cybersecurity","CVE-2022-25809, CVE-2022-25809 vulnerability, CVE-2022-25809 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[98],{"Operator":99,"Negate":27,"Nodes":100},"AND",[101,106],{"Operator":102,"Negate":27,"CPEMatch":103},"OR",[104],{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":105,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"C2C6A0A3-1979-4EF5-BF54-CFA6E2ADE971",{"Operator":102,"Negate":27,"CPEMatch":107},[108,110],{"Vulnerable":27,"Criteria":52,"MatchCriteriaID":109,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"DD49D60B-7E8A-4840-8D62-3EE867DFE55E",{"Vulnerable":27,"Criteria":55,"MatchCriteriaID":111,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"09A04576-1033-4160-BD96-C120DF86B1DA",[],[],{"lastModified":11,"cacheTime":115,"version":33},1793224282125,{"score":117,"band":118,"action":119,"scoredAt":120},54,"Medium","Plan remediation","2026-10-28T06:53:15.881982+00:00"]