Vulnerability CVE-2023-1383


Published: 2023-05-03

Description:
An Improper Enforcement of Behavioral Workflow vulnerability in the exchangeDeviceServices function on the amzn.dmgr service allowed an attacker to register services that are only locally accessible.

This issue affects:

Amazon Fire TV Stick 3rd gen versions prior to 6.2.9.5.
Insignia TV with FireOS versions prior to 7.6.3.3.

Type:

CWE-841

(Improper Enforcement of Behavioral Workflow)

 References:
https://www.bitdefender.com/blog/labs/vulnerabilities-identified-amazon-fire-tv-stick-insignia-fire-os-tv-series/

Copyright 2026, cxsecurity.com

 

Back to Top