Bestbuy Insignia TV
Approved changes feed: RSS · Atom
cpe:2.3:h:bestbuy:insignia_tv:-:*:*:*:*:*:*:*part: h version: - update: *
| Vendor | Bestbuy (2a7a0591-69d9-504d-a020-a433746ec8aa) |
|---|---|
| Product | Insignia Tv (a87e3ba6-3129-5169-9082-331004ba5bac) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-1385 |
not_vulnerable | 2026-06-08 05:52:35.744083 |
Details available
HIGH (7.1)
Improper JPAKE implementation allows offline PIN brute-forcing due to the initialization of random values to a known value, which leads to unauthorized authentication to amzn.lightning services.
This issue affects:
Amazon Fire TV Stick 3rd gen versions prior to 6.2.9.5.
Insignia TV with FireOS 7.6.3.3.
Published: 2023-05-03T12:33:31.872Z
Updated: 2025-01-30T15:00:50.049Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-1384 |
not_vulnerable | 2026-06-08 05:52:35.743517 |
Details available
MEDIUM (4.3)
The setMediaSource function on the amzn.thin.pl service does not sanitize the "source" parameter allowing for arbitrary javascript code to be run
This issue affects:
Amazon Fire TV Stick 3rd gen versions prior to 6.2.9.5.
Insignia TV with FireOS versions prior to 7.6.3.3.
Published: 2023-05-03T12:10:43.924Z
Updated: 2025-01-30T15:06:49.243Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-1383 |
not_vulnerable | 2026-06-08 05:52:35.741739 |
Details available
MEDIUM (5.4)
An Improper Enforcement of Behavioral Workflow vulnerability in the exchangeDeviceServices function on the amzn.dmgr service allowed an attacker to register services that are only locally accessible.
This issue affects:
Amazon Fire TV Stick 3rd gen versions prior to 6.2.9.5.
Insignia TV with FireOS versions prior to 7.6.3.3.
Published: 2023-05-03T11:42:10.455Z
Updated: 2025-01-30T15:07:33.815Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.