CVE-2023-1385 | BDVDB-2026-201416 Detail

Description#

Improper JPAKE implementation allows offline PIN brute-forcing due to the initialization of random values to a known value, which leads to unauthorized authentication to amzn.lightning services. This issue affects: Amazon Fire TV Stick 3rd gen versions prior to 6.2.9.5. Insignia TV with FireOS 7.6.3.3.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12023-05-03Record published in the CVE List.
2. Version 22025-01-30Most recent update recorded in the CVE List.