Fire Tv Stick 3rd Gen (Amazon) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 3 known versions, newest CVE from 2023-05-03. Vendor: Amazon.

CVEs of Fire Tv Stick 3rd Gen

• CVE-2023-1385 - CVSS 8.8 (high), 2023-05-03: Improper JPAKE implementation allows offline PIN brute-forcing due to the initialization of random values to a known value, which leads to unauthorized…
• CVE-2023-1384 - CVSS 6.1 (medium), 2023-05-03: The setMediaSource function on the amzn.thin.pl service does not sanitize the "source" parameter allowing for arbitrary javascript code to be run This issue…