IoT Security

Some Doorbell Cameras Sold on Amazon and Other Online Sites Have Major Security Flaws, Report Says

Major vulnerabilities were found in cameras manufactured by the Chinese company Eken Group Ltd., which produces video doorbells under the brand names EKEN and Tuck, among others.

Major vulnerabilities were found in cameras manufactured by the Chinese company Eken Group Ltd., which produces video doorbells under the brand names EKEN and Tuck, among others.

Some doorbell cameras sold by Amazon and other online retailers have security flaws that could allow bad actors to view footage from the devices or control them completely, according to an investigation published Thursday by Consumer Reports.

Researchers from the product-review organization said they found major vulnerabilities in cameras manufactured by the Chinese company Eken Group Ltd., which produces video doorbells under the brand names EKEN and Tuck, among others.

The devices have been sold online by Walmart, Shein, Sears and Temu, which said it removed Eken-made doorbells from its platform after Consumer Reports reached out to the company.

A Walmart spokesperson said the doorbell cameras Consumer Reports brought to its attention were listed on its marketplace by third-party sellers. The spokesperson said Walmart has removed those items and was offering refunds under its return policy.

Amazon, which has given the EKEN and Tuck doorbells its coveted “Amazon’s Choice” badge, did not immediately respond to a request for comment. But the doorbell cameras appeared to be available on its site on Thursday.

Sears and Shein also did not immediately respond to requests for comment.

Advertisement. Scroll to continue reading.

Researchers said the doorbell cameras made by Eken Group can be controlled by a company-operated app called Aiwit. They said bad actors can create an account on the app and gain access to a nearby doorbell camera by pairing it with another device. That gives them the ability to view footage — or access still images — and lock out the owner from the device, Consumer Reports said.

The group’s researchers also found that some of the doorbell cameras don’t have a registration code required by the Federal Communications Commission.

“Major e-commerce platforms like Amazon and Walmart need to do a better job of vetting sellers and products sold on their platforms, so consumers are not put at risk,” Justin Brookman, director of tech policy at Consumer Reports, said in a statement.

Related: Ring Doorbell App for Android Sends Out Loads of User Data

Related Content

IoT Security

The guidance aims to establish product cybersecurity requirements for IoT devices integrated into federal agencies’ networks.

Cybercrime

The lesser-known JackSkid and Mossad botnets have also been targeted in the operation.

Cybersecurity Funding

The Italian company has raised nearly $200 million in 2025 for its widely used embedded cybersecurity platform.

IoT Security

Android pKVM has achieved SESIP Level 5 certification, which means it’s resistant to highly skilled, motivated, and funded attackers.

ICS/OT

The need for secure encryption in IoT and IIoT devices is obvious, and potentially critical for OT and, by extension, much of the critical...

Cybersecurity Funding

Italian company Exein has raised €70 million (~$81 million) in a Series C funding round led by Balderton.

Cybersecurity Funding

‘Machine identities’, often used interchangeably with ‘non-human identities’ (NHIs), have been increasing rapidly since the start of digital transformation.

Compliance

By baking minimum expectations into procurement conversations, the plan is to steer software vendors to “secure-by-design and default” basics.

Copyright © 2026 SecurityWeek ®, a Wired Business Media Publication. All Rights Reserved.

Exit mobile version