CVE-2019-3989: OS Command Injection
Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary commands on the device due to improperly sanitized input when retrieving internal network configuration data.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2019-3989?
CVE-2019-3989 is a vulnerability in the Blink XT2 Sync Module firmware that allows remote attackers to execute arbitrary commands on the device.
How severe is CVE-2019-3989?
CVE-2019-3989 has a severity value of 9.8, which is considered critical.
How does CVE-2019-3989 occur?
CVE-2019-3989 occurs due to improperly sanitized input when retrieving internal network configuration data.
What software is affected by CVE-2019-3989?
The Blink XT2 Sync Module firmware prior to version 2.13.11 is affected by CVE-2019-3989.
Is the Amazon Blink Xt2 Sync Module vulnerable?
No, the Amazon Blink Xt2 Sync Module is not vulnerable to CVE-2019-3989.
How can I fix CVE-2019-3989?
To fix CVE-2019-3989, users should update their Blink XT2 Sync Module firmware to version 2.13.11 or later.