What is the vulnerability ID?

The vulnerability ID is CVE-2023-1383.

What is the severity of CVE-2023-1383?

The severity of CVE-2023-1383 is medium.

What is the affected software for CVE-2023-1383?

The affected software for CVE-2023-1383 includes Amazon Fire OS versions up to 6.2.9.5 and 7.6.3.3, and Bestbuy Insignia TV.

How does CVE-2023-1383 impact Amazon Fire TV Stick 3rd gen?

CVE-2023-1383 does not impact Amazon Fire TV Stick 3rd gen.

How do I fix CVE-2023-1383?

To fix CVE-2023-1383, update your software to version 6.2.9.5 or higher for Amazon Fire OS, and follow any patches or updates provided by Bestbuy for the Insignia TV.

Vulnerability/
CVE-2023-1383

medium

5.4

CWE

841

3/5/2023

2/8/2024

CVE-2023-1383

First published: Wed May 03 2023(Updated: )

An Improper Enforcement of Behavioral Workflow vulnerability in the exchangeDeviceServices function on the amzn.dmgr service allowed an attacker to register services that are only locally accessible. This issue affects: Amazon Fire TV Stick 3rd gen versions prior to 6.2.9.5. Insignia TV with FireOS versions prior to 7.6.3.3.

Credit: cve-requests@bitdefender.com

Affected Software	Affected Version	How to fix
Amazon Fire OS	<6.2.9.5
Amazon Fire TV Stick 3rd gen
Amazon Fire OS	<7.6.3.3
Bestbuy Insignia Tv

Remedy

An automatic firmware update to the following versions fixes the issue: Amazon Fire TV Stick 3rd gen version 6.2.9.5 Insignia TV with FireOS version 7.6.3.3

Never miss a vulnerability like this again

Reference Links

https://www.bitdefender.com/blog/labs/vulnerabilities-identified-amazon-fire-tv-stick-insignia-fire-os-tv-series/

Frequently Asked Questions

What is the vulnerability ID?
The vulnerability ID is CVE-2023-1383.
What is the severity of CVE-2023-1383?
The severity of CVE-2023-1383 is medium.
What is the affected software for CVE-2023-1383?
The affected software for CVE-2023-1383 includes Amazon Fire OS versions up to 6.2.9.5 and 7.6.3.3, and Bestbuy Insignia TV.
How does CVE-2023-1383 impact Amazon Fire TV Stick 3rd gen?
CVE-2023-1383 does not impact Amazon Fire TV Stick 3rd gen.
How do I fix CVE-2023-1383?
To fix CVE-2023-1383, update your software to version 6.2.9.5 or higher for Amazon Fire OS, and follow any patches or updates provided by Bestbuy for the Insignia TV.

collector/nvd-latest
collector/nvd-index
agent/type
agent/softwarecombine
collector/mitre-cve
source/MITRE
agent/remedy
agent/author
agent/weakness
agent/severity
agent/last-modified-date
agent/references
agent/description
agent/tags
agent/first-publish-date
agent/event
vendor/amazon
canonical/amazon fire os
canonical/amazon fire tv stick 3rd gen
vendor/bestbuy
canonical/bestbuy insignia tv

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.