Cyber Resilience

CVE-2023-1383

Medium

Published: 03 May 2023

Published
03 May 2023
Modified
21 November 2024
KEV Added
—
Patch
—
CVSS Score v3.1 5.4 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
EPSS Score 0.0015 35.7th percentile
Risk Priority 11 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2023-1383 is a medium-severity Improper Enforcement of Behavioral Workflow (CWE-841) vulnerability in Amazon Fire Os. Its CVSS base score is 5.4 (Medium).

Operationally, ranked at the 35.7th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability details

An Improper Enforcement of Behavioral Workflow vulnerability in the exchangeDeviceServices function on the amzn.dmgr service allowed an attacker to register services that are only locally accessible. This issue affects: Amazon Fire TV Stick 3rd gen versions prior to 6.2.9.5. Insignia…

more

TV with FireOS versions prior to 7.6.3.3.

CWE(s)
CWE-841NVD-CWE-Other

Related Threats

No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.

Affected Assets

amazon
fire os
≤ 6.2.9.5 · ≤ 7.6.3.3

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References