Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-1385
HistoryMay 03, 2023 - 1:15 p.m.

Input validation

2023-05-0313:15:00
PRIOn knowledge base
www.prio-n.com
4
improper jpake implementation
offline pin brute-forcing
unauthorized authentication
amazon fire tv stick
insignia tv
fireos
known vulnerability

8.6 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.7%

Improper JPAKE implementation allows offline PIN brute-forcing due to the initialization of random values to a known value, which leads to unauthorized authentication to amzn.lightning services.

This issue affects:

Amazon Fire TV Stick 3rd genΒ versions prior to 6.2.9.5.
Insignia TV with FireOSΒ 7.6.3.3.

CPENameOperatorVersion
fire_oslt6.2.9.5
fire_oslt7.6.3.3

8.6 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.7%

Related for PRION:CVE-2023-1385