Skip to content

Known vulnerabilities in Insignia TV with FireOS

Is your version affected?

CVE Summary Score Published
CVE-2023-1385 Improper JPAKE implementation allows offline PIN brute-forcing due to the initialization of random values to a known… 7.1 High May 3, 2023
CVE-2023-1384 The setMediaSource function on the amzn.thin.pl service does not sanitize the "source" parameter allowing for… 4.3 Medium May 3, 2023
CVE-2023-1383 An Improper Enforcement of Behavioral Workflow vulnerability in the exchangeDeviceServices function on the amzn.dmgr… 5.4 Medium May 3, 2023