ZDI 2026-08-12

ZDI-26-558: (Pwn2Own) Amazon Smart Plug OTA Update Process Improper Certificate Validation Vulnerability

Machine-generated analysis · WAYSCloud LLM

Network-adjacent attackers can bypass certificate validation for OTA updates on Amazon Smart Plug.

Context

The advisory concerns the OTA update process of the Amazon Smart Plug. It describes an improper certificate validation flaw that allows bypass of validation. Exploitation does not require authentication and can be performed by an attacker on the same network.

Operator considerations

Check: Verify the OTA update configuration and certificate validation settings on each Amazon Smart Plug.
Isolate: Place affected plugs on a trusted network segment or disconnect them from untrusted networks until the issue is addressed.

From Zero Day Initiative ↗

This vulnerability allows network-adjacent attackers to bypass certificate validation for OTA updates on affected installations of Amazon Smart Plug. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.8.

Read the full advisory on ZDI →