Some doorbell cameras sold on Amazon and other online sites have major security flaws, report says

NEW YORK — Some doorbell cameras sold by Amazon and other online retailers contain security flaws that allow bad actors to view images from the devices or completely control them, according to a study published Thursday by Consumer Reports.

Researchers at the product assessment organization said they have found major vulnerabilities in cameras made by Chinese company Eken Group Ltd., which produces video doorbells under the brand names EKEN and Tuck.

The devices have been sold online by Walmart, Shein, Sears and Temu, which said they removed Eken-made doorbells from their platforms after Consumer Reports contacted the company.

Amazon, which has given the EKEN and Tuck doorbells the coveted “Amazon’s Choice” badge, did not immediately respond to a request for comment. But the doorbell cameras appeared to be available on the site on Thursday.

Walmart, Sears and Shein also did not immediately respond to requests for comment.

Researchers said Eken Group’s doorbell cameras can be controlled by a company-operated app called Aiwit. They said bad actors can create an account on the app and access a nearby doorbell camera by linking it to another device. That gives them the ability to view footage — or access still images — and lock out the device owner, according to Consumer Reports.

The group’s researchers also found that some doorbell cameras do not have a registration code required by the Federal Communications Commission.

“Major e-commerce platforms like Amazon and Walmart need to better vet sellers and products sold on their platforms so that consumers are not at risk,” Justin Brookman, director of technology policy at Consumer Reports, said in a statement. .