Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary code and commands on the device due to insufficient UART protections.
Published December 12, 2019.
Amazon Blink Xt2 Sync Module Firmware