cgarrot/echo-dot-3-doebrite-research

PoC

Software-only security research on the Amazon Echo Dot 3rd Gen (doebrite): pre-auth DoS (CVE-2019-0205), SSRF, root SOCKS5, WhisperJoin BLE reversed, and a proof that no custom firmware can be installed over the air.

view exploit source poc_in_githubauthor cgarrotpublished 2026-10-22catalog poc_in_github
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2019-0205UShigh7.5Exploit
In Apache Thrift all versions up to and including 0.12.0, a server or client may run into an endless loop when feed with specific input data. Because the issue had already been par…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan