Vulnerabilities > CVE-2023-1385 - Unspecified vulnerability in Amazon Fire OS
Attack vector
ADJACENT_NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
HIGH Integrity impact
HIGH Availability impact
HIGH low complexity
amazon
Summary
Improper JPAKE implementation allows offline PIN brute-forcing due to the initialization of random values to a known value, which leads to unauthorized authentication to amzn.lightning services. This issue affects: Amazon Fire TV Stick 3rd gen versions prior to 6.2.9.5. Insignia TV with FireOS 7.6.3.3.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| OS | 10 | |
| Hardware | 1 | |
| Hardware | 1 |