← CVE Intelligence

CVE-2023-1385

Amazon / Fire TV Stick 3rd gen PUBLISHED

Description (CNA)

Improper JPAKE implementation allows offline PIN brute-forcing due to the initialization of random values to a known value, which leads to unauthorized authentication to amzn.lightning services. This issue affects: Amazon Fire TV Stick 3rd gen versions prior to 6.2.9.5. Insignia TV with FireOS 7.6.3.3.

Affected (CNA)

Vendor / productVersions
Amazon / Fire TV Stick 3rd genaffected 6.2.9.4
Insignia / TV with FireOS affected 7.6.3.2

CWE

CWE-330

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.