CVE-2023-1383CWE-841

An Improper Enforcement of Behavioral Workflow vulnerability in the exchangeDeviceServices function on the amzn.dmgr service allowed an attacker to register…

Medium · published May 3, 2023

CVSS v3.1
5.4
EPSS
0%
Percentile
19.0
In the wild
Unconfirmed
What it is

An Improper Enforcement of Behavioral Workflow vulnerability in the exchangeDeviceServices function on the amzn.dmgr service allowed an attacker to register services that are only locally accessible.

This issue affects:

Amazon Fire TV Stick 3rd gen versions prior to 6.2.9.5.

Insignia TV with FireOS versions prior to 7.6.3.3.

The record
Technical detail
CVSS v3.1
5.4 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00276 · 19.0th percentile
Weakness
CWE-841 · Improper Enforcement of Behavioral Workflow
Published
2023-05-03T11:42Z
EPSS history
Timeline
  • 03 MAY 11:42Z
    An Improper Enforcement of Behavioral Workflow vulnerability in the exchangeDeviceServices function on the amzn.dmgr service allowed an attacker to register…
    cvelistv5